Warning: Permanently added '[localhost]:55871' (ECDSA) to the list of known hosts. 2025/06/04 09:12:29 fuzzer started 2025/06/04 09:12:29 dialing manager at localhost:39055 syzkaller login: [ 104.413418] cgroup: Unknown subsys name 'net' [ 104.571878] cgroup: Unknown subsys name 'cpuset' [ 104.626907] cgroup: Unknown subsys name 'rlimit' 2025/06/04 09:12:43 syscalls: 204 2025/06/04 09:12:43 code coverage: enabled 2025/06/04 09:12:43 comparison tracing: enabled 2025/06/04 09:12:43 extra coverage: enabled 2025/06/04 09:12:43 setuid sandbox: enabled 2025/06/04 09:12:43 namespace sandbox: enabled 2025/06/04 09:12:43 Android sandbox: enabled 2025/06/04 09:12:43 fault injection: enabled 2025/06/04 09:12:43 leak checking: enabled 2025/06/04 09:12:43 net packet injection: enabled 2025/06/04 09:12:43 net device setup: enabled 2025/06/04 09:12:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/04 09:12:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/04 09:12:43 USB emulation: enabled 2025/06/04 09:12:43 hci packet injection: enabled 2025/06/04 09:12:43 wifi device emulation: enabled 2025/06/04 09:12:43 802.15.4 emulation: enabled 2025/06/04 09:12:43 fetching corpus: 0, signal 0/0 (executing program) 2025/06/04 09:12:45 starting 8 fuzzer processes 09:12:45 executing program 0: r0 = io_uring_setup(0x4248, &(0x7f0000000000)={0x0, 0x72cb, 0x14, 0x2, 0x34}) io_uring_setup(0x5402, &(0x7f0000000080)={0x0, 0x7d49, 0x8, 0x0, 0x350}) r1 = syz_io_uring_setup(0x5bd8, &(0x7f0000000100)={0x0, 0x2cc2, 0x8, 0x2, 0x106}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x10, r1, 0x0) r3 = syz_io_uring_setup(0x1d4c, &(0x7f0000000200)={0x0, 0x2c90, 0x4, 0x1, 0x2f6, 0x0, r1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0xa113, &(0x7f0000000300)=[r0, r1, r1], 0x3}, 0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x0, 0xee01}}, './file0\x00'}) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f00000003c0)=""/194) prctl$PR_GET_TSC(0x19, &(0x7f00000004c0)) syz_genetlink_get_family_id$net_dm(&(0x7f0000000500), 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000540), 0x6, 0x2100) recvmsg$unix(r5, &(0x7f0000001740)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001680)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/109, 0x6d}], 0x2, &(0x7f00000016c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}, 0x2040) io_uring_setup(0x261a, &(0x7f0000001780)={0x0, 0x5a6f, 0x10, 0x3, 0x324, 0x0, r6}) r7 = syz_io_uring_setup(0x7bdf, &(0x7f0000001800)={0x0, 0x2166, 0x0, 0x2, 0x89, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001880), &(0x7f00000018c0)) io_uring_setup(0x582a, &(0x7f0000001900)={0x0, 0x520f, 0x2, 0x1, 0x27, 0x0, r7}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001a80)={&(0x7f00000019c0)={0x88, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x20000050) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000001c00)=""/7) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000001c40)={0x64}, 0x4) 09:12:45 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0x0) tkill(0xffffffffffffffff, 0x29) r0 = gettid() getpriority(0x3, r0) syz_open_procfs$namespace(r0, &(0x7f0000000640)='ns/cgroup\x00') process_vm_writev(r0, &(0x7f0000000740)=[{&(0x7f0000000680)=""/150, 0x96}], 0x1, &(0x7f0000001940)=[{&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/167, 0xa7}, {&(0x7f0000001880)=""/185, 0xb9}], 0x4, 0x0) r1 = gettid() tgkill(r1, r0, 0x32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000019c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008084}, 0x94) process_vm_writev(r0, &(0x7f0000001cc0)=[{&(0x7f0000001b00)=""/25, 0x19}, {&(0x7f0000001b40)=""/9, 0x9}, {&(0x7f0000001b80)=""/105, 0x69}, {&(0x7f0000001c00)=""/179, 0xb3}], 0x4, &(0x7f0000001d80)=[{&(0x7f0000001d00)=""/99, 0x63}], 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001dc0), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001e40)=""/11, 0xb}, {&(0x7f0000001e80)=""/211, 0xd3}, {&(0x7f0000001f80)=""/143, 0x8f}], 0x3, &(0x7f0000002080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x2120) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x38, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x105}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008004}, 0x40c4) r5 = getpgrp(r0) process_vm_writev(r5, &(0x7f0000002540)=[{&(0x7f0000002240)=""/208, 0xd0}, {&(0x7f0000002340)=""/108, 0x6c}, {&(0x7f00000023c0)=""/93, 0x5d}, {&(0x7f0000002440)=""/255, 0xff}], 0x4, &(0x7f0000002800)=[{&(0x7f0000002580)=""/27, 0x1b}, {&(0x7f00000025c0)=""/51, 0x33}, {&(0x7f0000002600)=""/138, 0x8a}, {&(0x7f00000026c0)=""/113, 0x71}, {&(0x7f0000002740)=""/69, 0x45}, {&(0x7f00000027c0)=""/57, 0x39}], 0x6, 0x0) getpriority(0x2, r5) fork() sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000002a00)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x44, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) 09:12:45 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) r1 = memfd_secret(0x80000) ioctl$PTP_PIN_SETFUNC2(r1, 0x40603d10, &(0x7f0000000080)={'\x00', 0xff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000000140)={0x1, 0x4}) r4 = memfd_secret(0x80000) io_uring_setup(0x1f61, &(0x7f0000000180)={0x0, 0x182f, 0x4, 0x2, 0x15e, 0x0, r4}) getgroups(0x1, &(0x7f0000000200)=[0xffffffffffffffff]) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0xee00, r5, 0xffffffffffffffff, 0x0, 0x88, 0x5}, 0xcc7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r6, 0x8914, &(0x7f00000002c0)={'erspan0\x00', @ifru_ivalue}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) r7 = semget(0x1, 0x2, 0x80) semctl$GETZCNT(r7, 0x3, 0xf, &(0x7f0000000340)=""/168) accept$packet(r3, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040081}, 0x200448c0) semctl$GETZCNT(r7, 0x3, 0xf, &(0x7f0000000580)=""/110) syz_genetlink_get_family_id$fou(&(0x7f0000000600), 0xffffffffffffffff) setpriority(0x2, 0x0, 0x9) 09:12:45 executing program 3: socketpair(0x2, 0x2, 0x7c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/186, 0xba}, {&(0x7f0000000180)=""/119, 0x77}, {&(0x7f0000000200)=""/75, 0x4b}, {&(0x7f0000000280)=""/19, 0x13}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/187, 0xbb}], 0x8, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x24000085) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x7, &(0x7f0000000800)=0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000000840)={{0x1, 0x1, 0x18, r5, {r3, r4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x102002}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x44, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3e}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x45) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) wait4(r2, &(0x7f0000000b40), 0x80000000, &(0x7f0000000b80)) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40), 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c}, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r10, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000e80), r0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000f00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r10, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x44}}, 0x4000000) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r10) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x80, r12, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c080}, 0x5) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r13, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x4000) [ 119.744708] audit: type=1400 audit(1749028365.202:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:12:45 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40048}, 0x80) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x20000024) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x400}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x2000c000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x64, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x800) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r1) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x4084) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffff3d}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, r2, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x40024000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000e40)={0xfffffffffffffffe, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 09:12:45 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x4040005) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devlog_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x4004) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000480), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x61) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}}, 0x2000c090) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x20004000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x4c}}, 0x20000086) r6 = memfd_secret(0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) socketpair(0x1e, 0xa, 0x30, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000c80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xf8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r9}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r10}, {0x8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0xf8}}, 0x4000000) 09:12:45 executing program 6: ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/4096) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001080)) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000010c0)={0xf}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7413}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000016c0), r2) r3 = socket(0x1d, 0xa, 0x9) recvmsg$unix(r3, &(0x7f00000018c0)={&(0x7f0000001700), 0x6e, &(0x7f0000001780), 0x0, &(0x7f00000017c0)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x30) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r2) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x2c, r6, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x20008810) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001a40)=""/203) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b40), r2) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001b80)=""/17) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000001c00), r1) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x44, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x111}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d80), r1) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001f00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x68, r8, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) 09:12:45 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80042}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44081}, 0x20008804) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x78, r4, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x4000) syz_genetlink_get_family_id$net_dm(&(0x7f0000000780), r0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r6, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r5, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x68, r7, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40c0}, 0xc0) [ 121.198595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.200910] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.207114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.208980] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.215222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.217541] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.222594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.231324] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.247318] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.254894] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.280176] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.283039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.285418] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.289387] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.291271] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.298779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.314583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.317473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.348903] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.362916] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 121.363058] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.374710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.378458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.386231] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.390748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.397354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 121.397844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 121.406909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 121.409407] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 121.426619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 121.429753] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 121.433770] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 121.451379] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 121.475854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 121.484244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 121.491577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 121.498008] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 121.500278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 121.503288] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 121.516319] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 123.284754] Bluetooth: hci1: command tx timeout [ 123.348126] Bluetooth: hci0: command tx timeout [ 123.412163] Bluetooth: hci2: command tx timeout [ 123.413316] Bluetooth: hci3: command tx timeout [ 123.477009] Bluetooth: hci4: command tx timeout [ 123.604065] Bluetooth: hci6: command tx timeout [ 123.604110] Bluetooth: hci5: command tx timeout [ 123.668101] Bluetooth: hci7: command tx timeout [ 125.332309] Bluetooth: hci1: command tx timeout [ 125.397234] Bluetooth: hci0: command tx timeout [ 125.460408] Bluetooth: hci3: command tx timeout [ 125.461306] Bluetooth: hci2: command tx timeout [ 125.524991] Bluetooth: hci4: command tx timeout [ 125.652094] Bluetooth: hci6: command tx timeout [ 125.652139] Bluetooth: hci5: command tx timeout [ 125.716898] Bluetooth: hci7: command tx timeout [ 127.380175] Bluetooth: hci1: command tx timeout [ 127.444214] Bluetooth: hci0: command tx timeout [ 127.510040] Bluetooth: hci3: command tx timeout [ 127.510067] Bluetooth: hci2: command tx timeout [ 127.572050] Bluetooth: hci4: command tx timeout [ 127.700396] Bluetooth: hci5: command tx timeout [ 127.701370] Bluetooth: hci6: command tx timeout [ 127.764053] Bluetooth: hci7: command tx timeout [ 129.428268] Bluetooth: hci1: command tx timeout [ 129.492186] Bluetooth: hci0: command tx timeout [ 129.556398] Bluetooth: hci2: command tx timeout [ 129.557057] Bluetooth: hci3: command tx timeout [ 129.621272] Bluetooth: hci4: command tx timeout [ 129.748465] Bluetooth: hci5: command tx timeout [ 129.749031] Bluetooth: hci6: command tx timeout [ 129.812181] Bluetooth: hci7: command tx timeout [ 184.089210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.095765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.098159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.100678] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.112477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.117746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.125095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.139458] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.158785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.161579] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 184.166849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.168862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 184.170892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.175293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.175341] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.176516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 184.196727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 184.197834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.199199] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.205392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.208751] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.211434] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 184.217175] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.241598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.250597] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.286109] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 184.293117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 184.303851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 184.309904] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 184.322126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 184.405609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.424621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.434449] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.485742] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.494493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.660283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 184.691668] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 184.743612] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 184.781755] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 184.795027] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 186.196250] Bluetooth: hci1: command tx timeout [ 186.260264] Bluetooth: hci3: command tx timeout [ 186.324381] Bluetooth: hci0: command tx timeout [ 186.326271] Bluetooth: hci2: command tx timeout [ 186.328239] Bluetooth: hci4: command tx timeout [ 186.388572] Bluetooth: hci6: command tx timeout [ 186.582016] Bluetooth: hci5: command tx timeout [ 186.900217] Bluetooth: hci7: command tx timeout [ 188.244305] Bluetooth: hci1: command tx timeout [ 188.308469] Bluetooth: hci3: command tx timeout [ 188.374000] Bluetooth: hci0: command tx timeout [ 188.375636] Bluetooth: hci2: command tx timeout [ 188.377302] Bluetooth: hci4: command tx timeout [ 188.436024] Bluetooth: hci6: command tx timeout [ 188.628075] Bluetooth: hci5: command tx timeout [ 188.949049] Bluetooth: hci7: command tx timeout [ 190.292201] Bluetooth: hci1: command tx timeout [ 190.356052] Bluetooth: hci3: command tx timeout [ 190.420077] Bluetooth: hci4: command tx timeout [ 190.420574] Bluetooth: hci0: command tx timeout [ 190.421181] Bluetooth: hci2: command tx timeout [ 190.484079] Bluetooth: hci6: command tx timeout [ 190.676018] Bluetooth: hci5: command tx timeout [ 190.998877] Bluetooth: hci7: command tx timeout [ 192.340070] Bluetooth: hci1: command tx timeout [ 192.407021] Bluetooth: hci3: command tx timeout [ 192.468270] Bluetooth: hci2: command tx timeout [ 192.468801] Bluetooth: hci0: command tx timeout [ 192.470138] Bluetooth: hci4: command tx timeout [ 192.532043] Bluetooth: hci6: command tx timeout [ 192.726228] Bluetooth: hci5: command tx timeout [ 193.044309] Bluetooth: hci7: command tx timeout [ 246.378409] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.386209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.394372] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.402921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.406700] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.440663] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.448324] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.460181] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.468461] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.473157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.567840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.573166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.576244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.586300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.595122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 246.632504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.634906] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.638665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.667705] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.670675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.696655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.705300] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.725137] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.735684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.748119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.842027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.852436] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.855616] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.888502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.890756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.894853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.901749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.913432] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.922289] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.941509] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.946195] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.956335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.976443] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 247.051092] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 247.056249] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.469080] Bluetooth: hci0: command tx timeout [ 248.533035] Bluetooth: hci1: command tx timeout [ 248.660114] Bluetooth: hci2: command tx timeout [ 248.725098] Bluetooth: hci3: command tx timeout [ 248.852104] Bluetooth: hci4: command tx timeout [ 248.981012] Bluetooth: hci6: command tx timeout [ 249.044078] Bluetooth: hci5: command tx timeout [ 249.108044] Bluetooth: hci7: command tx timeout [ 250.516255] Bluetooth: hci0: command tx timeout [ 250.581024] Bluetooth: hci1: command tx timeout [ 250.708224] Bluetooth: hci2: command tx timeout [ 250.772078] Bluetooth: hci3: command tx timeout [ 250.900028] Bluetooth: hci4: command tx timeout [ 251.029267] Bluetooth: hci6: command tx timeout [ 251.092078] Bluetooth: hci5: command tx timeout [ 251.157017] Bluetooth: hci7: command tx timeout [ 252.564026] Bluetooth: hci0: command tx timeout [ 252.628050] Bluetooth: hci1: command tx timeout [ 252.757996] Bluetooth: hci2: command tx timeout [ 252.820063] Bluetooth: hci3: command tx timeout [ 252.948155] Bluetooth: hci4: command tx timeout [ 253.076156] Bluetooth: hci6: command tx timeout [ 253.140048] Bluetooth: hci5: command tx timeout [ 253.204297] Bluetooth: hci7: command tx timeout [ 254.612051] Bluetooth: hci0: command tx timeout [ 254.676449] Bluetooth: hci1: command tx timeout [ 254.805125] Bluetooth: hci2: command tx timeout [ 254.868091] Bluetooth: hci3: command tx timeout [ 254.996584] Bluetooth: hci4: command tx timeout [ 255.124050] Bluetooth: hci6: command tx timeout [ 255.189101] Bluetooth: hci5: command tx timeout [ 255.253305] Bluetooth: hci7: command tx timeout [ 309.099858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.156699] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.162074] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.176407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.179022] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.179211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.181160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.181433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.186075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.193786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.347556] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 309.357136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 309.369253] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 309.392313] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.398244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.400353] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.406226] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.410301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.425668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 309.435044] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 309.454050] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.456597] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.459259] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.465269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.467573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.549314] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.565321] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 309.568428] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 309.569876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.572675] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 309.574587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.579363] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 309.583872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 309.590951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.593180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 309.622558] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.632607] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.641398] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.743301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 309.779526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.252048] Bluetooth: hci1: command tx timeout [ 311.254244] Bluetooth: hci0: command tx timeout [ 311.446507] Bluetooth: hci3: command tx timeout [ 311.509402] Bluetooth: hci4: command tx timeout [ 311.572041] Bluetooth: hci2: command tx timeout [ 311.842033] Bluetooth: hci5: command tx timeout [ 311.843836] Bluetooth: hci6: command tx timeout [ 311.903202] Bluetooth: hci7: command tx timeout [ 313.301987] Bluetooth: hci1: command tx timeout [ 313.302540] Bluetooth: hci0: command tx timeout [ 313.494210] Bluetooth: hci3: command tx timeout [ 313.557091] Bluetooth: hci4: command tx timeout [ 313.621025] Bluetooth: hci2: command tx timeout [ 313.876104] Bluetooth: hci5: command tx timeout [ 313.876657] Bluetooth: hci6: command tx timeout [ 313.941051] Bluetooth: hci7: command tx timeout [ 315.349485] Bluetooth: hci0: command tx timeout [ 315.350250] Bluetooth: hci1: command tx timeout [ 315.541047] Bluetooth: hci3: command tx timeout [ 315.605295] Bluetooth: hci4: command tx timeout [ 315.669082] Bluetooth: hci2: command tx timeout [ 315.924074] Bluetooth: hci6: command tx timeout [ 315.924635] Bluetooth: hci5: command tx timeout [ 315.988102] Bluetooth: hci7: command tx timeout [ 317.396363] Bluetooth: hci1: command tx timeout [ 317.397738] Bluetooth: hci0: command tx timeout [ 317.589449] Bluetooth: hci3: command tx timeout [ 317.653448] Bluetooth: hci4: command tx timeout [ 317.717515] Bluetooth: hci2: command tx timeout [ 317.973111] Bluetooth: hci5: command tx timeout [ 317.973669] Bluetooth: hci6: command tx timeout [ 318.037357] Bluetooth: hci7: command tx timeout [ 371.646816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 371.654394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 371.659869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 371.675269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 371.678020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 371.746292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 371.749966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 371.751258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 371.757275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 371.759705] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.878815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 371.891330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 371.899354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 371.908724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 371.915257] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 371.959575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 371.968444] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 371.987289] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 371.999990] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.014368] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.297842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.324852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 372.344359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.345397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.346717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.348039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 372.351321] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.351585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 372.354362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.358530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.362490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.363744] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 372.367172] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.369486] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 372.371413] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.372668] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 372.382667] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.398662] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.432294] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 372.451307] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.716291] Bluetooth: hci0: command tx timeout [ 373.780110] Bluetooth: hci1: command tx timeout [ 373.973994] Bluetooth: hci2: command tx timeout [ 374.101651] Bluetooth: hci3: command tx timeout [ 374.420122] Bluetooth: hci7: command tx timeout [ 374.484166] Bluetooth: hci5: command tx timeout [ 374.548990] Bluetooth: hci6: command tx timeout [ 374.549031] Bluetooth: hci4: command tx timeout [ 375.767009] Bluetooth: hci0: command tx timeout [ 375.828574] Bluetooth: hci1: command tx timeout [ 376.020041] Bluetooth: hci2: command tx timeout [ 376.148126] Bluetooth: hci3: command tx timeout [ 376.470012] Bluetooth: hci7: command tx timeout [ 376.532131] Bluetooth: hci5: command tx timeout [ 376.596187] Bluetooth: hci4: command tx timeout [ 376.596228] Bluetooth: hci6: command tx timeout [ 377.812429] Bluetooth: hci0: command tx timeout [ 377.877986] Bluetooth: hci1: command tx timeout [ 378.068077] Bluetooth: hci2: command tx timeout [ 378.197106] Bluetooth: hci3: command tx timeout [ 378.516657] Bluetooth: hci7: command tx timeout [ 378.580210] Bluetooth: hci5: command tx timeout [ 378.644485] Bluetooth: hci4: command tx timeout [ 378.645616] Bluetooth: hci6: command tx timeout [ 379.860310] Bluetooth: hci0: command tx timeout [ 379.924264] Bluetooth: hci1: command tx timeout [ 380.116260] Bluetooth: hci2: command tx timeout [ 380.244622] Bluetooth: hci3: command tx timeout [ 380.564985] Bluetooth: hci7: command tx timeout [ 380.628608] Bluetooth: hci5: command tx timeout [ 380.692035] Bluetooth: hci6: command tx timeout [ 380.692063] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 09:17:48 Registers: info registers vcpu 0 RAX=0000000000000182 RBX=ffff8880197e0000 RCX=0000000000000200 RDX=0000000000000008 RSI=ffff8880197e0a80 RDI=ffff8880197e0a58 RBP=ffff8880197e0a58 RSP=ffff88802fa574b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff8880197e0a80 R13=97a726a3b8b7ab0b R14=0000000000000000 R15=0000000000000001 RIP=ffffffff815147c3 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff5fb645368 CR3=00000000305e8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=5de865a115efad00 RBX=ffff888036c83700 RCX=25508ca8f3079cb5 RDX=0000000085b43e03 RSI=000000007e136c90 RDI=00000000240df03a RBP=ffff888036c84158 RSP=ffff88803151f750 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888036c84180 R13=0000000003c7aa93 R14=0000000000000000 R15=25508ca8f3079cb5 RIP=ffffffff8151928c RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f391ee2e620 CR3=0000000034387000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000