Warning: Permanently added '[localhost]:26464' (ECDSA) to the list of known hosts. 2025/06/08 15:26:33 fuzzer started 2025/06/08 15:26:34 dialing manager at localhost:40003 syzkaller login: [ 98.989020] cgroup: Unknown subsys name 'net' [ 99.172426] cgroup: Unknown subsys name 'cpuset' [ 99.227996] cgroup: Unknown subsys name 'rlimit' 2025/06/08 15:26:50 syscalls: 215 2025/06/08 15:26:50 code coverage: enabled 2025/06/08 15:26:50 comparison tracing: enabled 2025/06/08 15:26:50 extra coverage: enabled 2025/06/08 15:26:50 setuid sandbox: enabled 2025/06/08 15:26:50 namespace sandbox: enabled 2025/06/08 15:26:50 Android sandbox: enabled 2025/06/08 15:26:50 fault injection: enabled 2025/06/08 15:26:50 leak checking: enabled 2025/06/08 15:26:50 net packet injection: enabled 2025/06/08 15:26:50 net device setup: enabled 2025/06/08 15:26:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/08 15:26:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/08 15:26:50 USB emulation: enabled 2025/06/08 15:26:50 hci packet injection: enabled 2025/06/08 15:26:50 wifi device emulation: enabled 2025/06/08 15:26:50 802.15.4 emulation: enabled 2025/06/08 15:26:50 fetching corpus: 0, signal 0/0 (executing program) 2025/06/08 15:26:51 starting 8 fuzzer processes 15:26:51 executing program 0: setfsgid(0x0) r0 = getegid() write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0xaf, 0x20, 0x7, 0x20, 0x3ff}, 0x48) getgroups(0x2, &(0x7f0000000080)=[r0, r0]) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, &(0x7f0000001740)={&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f0000001680)=[{&(0x7f0000000200)=""/148, 0x94}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000300)=""/79, 0x4f}, {&(0x7f0000000380)=""/187, 0xbb}, {&(0x7f0000000440)=""/47, 0x2f}, {&(0x7f0000000480)=""/233, 0xe9}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/18, 0x12}, {&(0x7f00000015c0)=""/136, 0x88}], 0x9}, 0x102) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001780), 0x2) syz_open_procfs$namespace(r1, &(0x7f00000017c0)='ns/uts\x00') sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x24000045) r3 = syz_open_dev$mouse(&(0x7f0000001900), 0xee, 0x680081) r4 = syz_genetlink_get_family_id$team(&(0x7f0000001980), r2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000019c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001a00)={'team0\x00', 0x0}) recvmsg(r2, &(0x7f0000002d40)={&(0x7f0000001a40)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/205, 0xcd}, {&(0x7f0000001bc0)=""/173, 0xad}, {&(0x7f0000001c80)=""/111, 0x6f}, {&(0x7f0000001d00)=""/4096, 0x1000}], 0x4}, 0x40) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002d80)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000002e80)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000003300)={&(0x7f0000001940), 0xc, &(0x7f00000032c0)={&(0x7f0000002ec0)={0x400, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7bd7}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xfff, 0xe0, 0x4, 0x401}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x400}, 0x1, 0x0, 0x0, 0x4010}, 0x40000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000003340)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) recvmsg(r2, &(0x7f0000004940)={0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000033c0)=""/199, 0xc7}, {&(0x7f00000034c0)=""/8, 0x8}, {&(0x7f0000003500)=""/152, 0x98}, {&(0x7f00000035c0)=""/167, 0xa7}, {&(0x7f0000003680)}, {&(0x7f00000036c0)=""/139, 0x8b}, {&(0x7f0000003780)=""/42, 0x2a}, {&(0x7f00000037c0)=""/253, 0xfd}], 0x8, &(0x7f0000003940)=""/4096, 0x1000}, 0x1) 15:26:51 executing program 1: keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/227, 0xe3) r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2400, 0x11, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x0, 0x3}, 0x200, 0x2, 0x4, 0x7, 0x9, 0xfff, 0xffe1, 0x0, 0x9a, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='^\x00') syz_genetlink_get_family_id$team(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket(0x1, 0x2, 0x5) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfffc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x9c}, 0x1, 0x0, 0x0, 0x88d1}, 0x4) read$char_usb(0xffffffffffffffff, &(0x7f0000000540)=""/77, 0x4d) r4 = syz_open_dev$mouse(&(0x7f00000005c0), 0xfffffffffffffffe, 0x48800) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5ec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) r5 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x80, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x8001, 0x1ff}, 0x44002, 0x5, 0x0, 0x0, 0x6, 0xffffffff, 0xffff, 0x0, 0xb, 0x0, 0xfff}, 0xffffffffffffffff, 0x6, r0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000007c0)={0x3, 0x80, 0x93, 0x40, 0x5, 0x2d, 0x0, 0x3, 0x1000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000780), 0x4}, 0x8200, 0xffff, 0x40, 0x3, 0x533, 0x80000000, 0xf08b, 0x0, 0x0, 0x0, 0x6}) r6 = fsmount(r4, 0x0, 0x80) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000840)='^\x00', 0x0, r5) r7 = getegid() syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r2) setfsgid(r7) 15:26:51 executing program 2: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) r0 = socket(0x2a, 0x3, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="f27fa2f5bad1ea507d33f3a44a64e99843328eea72f38646aed5e3f255d1319e17e2b120d7842deeb51fc6c9f55684dfca2ee412956f19402f3e59a9e3a93b01d4ca64076a177066ceeb27c446e822d7028c8aa86aed7d7de34fdbc3b47483b8edd167a6bc7ff713dfb6e6243200", 0x6e, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) prctl$PR_SET_FPEMU(0xa, 0x3) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000001c0)=""/247, 0xf7, 0x81, &(0x7f0000000300)={r2, r3+60000000}) bind$bt_sco(r0, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000380)=""/100, &(0x7f0000000400)=0x64) mq_open(&(0x7f0000000440)='syz', 0x40, 0x40, &(0x7f0000000480)={0x20, 0x86, 0x7a3f, 0xe8d}) recvmsg(r0, &(0x7f0000001900)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/56, 0x38}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x6}, 0x10) r4 = fsmount(r1, 0x0, 0x82) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x58, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) r5 = fsopen(&(0x7f0000001c80)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000001cc0)='sync\x00', 0x0, 0x0) r6 = syz_open_dev$mouse(&(0x7f0000001d00), 0x400, 0xe0a00) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000001d40)='user\x00', 0x0, r0) clock_getres(0x4, &(0x7f0000001d80)) [ 116.188843] audit: type=1400 audit(1749396411.789:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:26:51 executing program 3: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macsec0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000c0) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44040}, 0x80) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000090) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan4\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) prctl$PR_SET_FPEMU(0xa, 0x3) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000580), 0xffffffffffffffff) r5 = syz_open_dev$mouse(&(0x7f00000005c0), 0x8, 0x280080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000007c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r9, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:memory_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}]}, 0x48}}, 0x4800) 15:26:51 executing program 4: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) socketpair(0x6, 0x80000, 0x7fff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/161, &(0x7f0000000140)=0xa1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000180)='lazytime\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000001c0)) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200)=0x20, &(0x7f0000000240)=0x2) r4 = openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f00000002c0)={{0x0, 0x8, 0x3e, 0x1, 0x9, 0x7, 0x6, 0x4, 0xfff, 0x1000, 0x4, 0x2, 0x200, 0xc318, 0x4}}) r5 = syz_io_uring_setup(0x67e2, &(0x7f00000012c0)={0x0, 0x5960, 0x2, 0x2, 0x3e3}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001340), &(0x7f0000001380)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f00000013c0)) r6 = socket$inet(0x2, 0x3, 0x9) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000015c0)={{{@in6=@private1, @in=@dev}}, {{@in6=@private1}, 0x0, @in=@private}}, &(0x7f00000016c0)=0xe8) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000001700)={{0x0, 0x382, 0x9, 0x100000000, 0x4a4, 0x4, 0x0, 0x10000, 0x7fadbe1d, 0x8001, 0x4, 0x9, 0xcf, 0x2378, 0xc3}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f00000017c0)=""/29, &(0x7f0000001800)=0x1d) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x5220840}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) 15:26:51 executing program 5: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x2404c007) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xec, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x58, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfc00}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x20}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0xc5}, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x154, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40028000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xfd}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x24c, r4, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x6, 0x7, 0x1}, {0x81, 0x80, 0x4e, 0x5}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xc7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x24c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c080) mq_timedsend(0xffffffffffffffff, &(0x7f0000000dc0)="237a8b173583e993ba1a34aff4b950930b3f7de0dc461cffa0c2e2195ce55a915ba264fae15411b9c692a00a4a11793919a4d68c09d1bc3f89f004af5cf07909a642008a8d65208f816f67834c38dbefe6bc1f2943771f2c81b00dd4b6499a2a22dbeaded09e08d7f9f666385db4c495ecc9d92b53fde3fa", 0x78, 0x8, &(0x7f0000000e40)) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000ec0), r3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003700)={{{@in6=@mcast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000003800)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000003900)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)={0x60, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}]}}]}, 0x60}}, 0x80) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003980), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000003ac0)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003a80)={&(0x7f00000039c0)={0xa8, r8, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:ppp_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000010}, 0x4000) 15:26:51 executing program 6: recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/23, 0x17}, {&(0x7f00000000c0)=""/232, 0xe8}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/141, 0x8d}], 0x7}, 0x40002103) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000640)=0xe8) r2 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x12, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r2, &(0x7f0000000680)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xfffffffa) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000006c0)='\x00', &(0x7f0000000700)='./file0\x00', 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), r0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x7c) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c10}, 0x4c000) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x20010, r5, 0x8000000) r7 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001040), 0x101000, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000001080)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0x7ff, {0x0, r5}, 0x81, 0x2, 0x0, {0x0, 0x0, r7}}, 0x1000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r8, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001280), r8) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40c2}, 0xc051) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001380)) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'sit0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xec4d}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6051}, 0x4000000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r8, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x24005005}, 0x10) 15:26:52 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x28}}, 0x2) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x8000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0x20000000) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x5) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000780)={&(0x7f0000000600), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x70, r1, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000900)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040020}, 0x4010) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x8000040) [ 117.466646] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 117.473830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 117.478045] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 117.490059] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 117.494317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 117.676381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 117.678396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 117.679803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 117.684159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 117.688081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 117.829667] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 117.837042] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 117.844247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.847614] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 117.852288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.868527] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 117.873412] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 117.893238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.902000] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 117.904818] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 117.919762] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.922892] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 117.923694] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 117.924760] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 117.930097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.937604] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 117.942140] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.944938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 117.946289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.949513] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 117.951932] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 117.962733] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 117.966541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.976948] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 117.977097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.992839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 118.060645] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.068253] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.075894] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.095453] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 119.519867] Bluetooth: hci0: command tx timeout [ 119.777718] Bluetooth: hci1: command tx timeout [ 120.031642] Bluetooth: hci2: command tx timeout [ 120.095938] Bluetooth: hci7: command tx timeout [ 120.097320] Bluetooth: hci3: command tx timeout [ 120.098126] Bluetooth: hci5: command tx timeout [ 120.160664] Bluetooth: hci6: command tx timeout [ 120.161305] Bluetooth: hci4: command tx timeout [ 121.569625] Bluetooth: hci0: command tx timeout [ 121.823868] Bluetooth: hci1: command tx timeout [ 122.079814] Bluetooth: hci2: command tx timeout [ 122.143993] Bluetooth: hci5: command tx timeout [ 122.144519] Bluetooth: hci3: command tx timeout [ 122.144955] Bluetooth: hci7: command tx timeout [ 122.208014] Bluetooth: hci4: command tx timeout [ 122.208698] Bluetooth: hci6: command tx timeout [ 123.615723] Bluetooth: hci0: command tx timeout [ 123.873510] Bluetooth: hci1: command tx timeout [ 124.127878] Bluetooth: hci2: command tx timeout [ 124.193504] Bluetooth: hci3: command tx timeout [ 124.193987] Bluetooth: hci7: command tx timeout [ 124.194411] Bluetooth: hci5: command tx timeout [ 124.255939] Bluetooth: hci4: command tx timeout [ 124.256413] Bluetooth: hci6: command tx timeout [ 125.665552] Bluetooth: hci0: command tx timeout [ 125.919886] Bluetooth: hci1: command tx timeout [ 126.175785] Bluetooth: hci2: command tx timeout [ 126.239635] Bluetooth: hci5: command tx timeout [ 126.240105] Bluetooth: hci7: command tx timeout [ 126.241335] Bluetooth: hci3: command tx timeout [ 126.303716] Bluetooth: hci6: command tx timeout [ 126.304217] Bluetooth: hci4: command tx timeout [ 180.479100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.482058] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.487844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.490280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.494339] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.500067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.501718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.509940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.520273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.530390] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.600865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.604937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.613830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.618596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.623149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.626422] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.638658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.641187] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.648537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.651456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.652780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.658790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.660860] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.666217] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.672174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.676185] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.678228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.682136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.685752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.707977] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.709923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.714291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.725844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.727154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.731616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.811913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.818362] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.835889] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.863466] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.891978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.559616] Bluetooth: hci1: command tx timeout [ 182.623660] Bluetooth: hci0: command tx timeout [ 182.751609] Bluetooth: hci3: command tx timeout [ 182.817822] Bluetooth: hci2: command tx timeout [ 182.818425] Bluetooth: hci6: command tx timeout [ 182.818901] Bluetooth: hci5: command tx timeout [ 182.943625] Bluetooth: hci7: command tx timeout [ 182.945064] Bluetooth: hci4: command tx timeout [ 184.607644] Bluetooth: hci1: command tx timeout [ 184.672508] Bluetooth: hci0: command tx timeout [ 184.799578] Bluetooth: hci3: command tx timeout [ 184.864279] Bluetooth: hci5: command tx timeout [ 184.864882] Bluetooth: hci6: command tx timeout [ 184.864898] Bluetooth: hci2: command tx timeout [ 184.993556] Bluetooth: hci4: command tx timeout [ 184.994036] Bluetooth: hci7: command tx timeout [ 186.655587] Bluetooth: hci1: command tx timeout [ 186.719701] Bluetooth: hci0: command tx timeout [ 186.847567] Bluetooth: hci3: command tx timeout [ 186.912814] Bluetooth: hci6: command tx timeout [ 186.913764] Bluetooth: hci5: command tx timeout [ 186.914423] Bluetooth: hci2: command tx timeout [ 187.039647] Bluetooth: hci7: command tx timeout [ 187.040126] Bluetooth: hci4: command tx timeout [ 188.703567] Bluetooth: hci1: command tx timeout [ 188.767642] Bluetooth: hci0: command tx timeout [ 188.897539] Bluetooth: hci3: command tx timeout [ 188.959711] Bluetooth: hci2: command tx timeout [ 188.960627] Bluetooth: hci6: command tx timeout [ 188.960655] Bluetooth: hci5: command tx timeout [ 189.087625] Bluetooth: hci4: command tx timeout [ 189.087644] Bluetooth: hci7: command tx timeout [ 242.986162] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.991739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.995050] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.004865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.008798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.068303] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 243.074289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 243.077003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 243.090007] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 243.100367] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.153499] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.157955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.160131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.165130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.176874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.313391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.330069] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.337668] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.341112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.343442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.350089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.356173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.376923] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.395219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.397213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.398657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.402862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.411890] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.412715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.416669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.422190] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.438912] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.444188] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.455905] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.462922] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.463723] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.469108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.474124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.505368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.519230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.088903] Bluetooth: hci0: command tx timeout [ 245.151697] Bluetooth: hci1: command tx timeout [ 245.217306] Bluetooth: hci2: command tx timeout [ 245.472246] Bluetooth: hci4: command tx timeout [ 245.535583] Bluetooth: hci6: command tx timeout [ 245.536605] Bluetooth: hci3: command tx timeout [ 245.599605] Bluetooth: hci7: command tx timeout [ 245.600551] Bluetooth: hci5: command tx timeout [ 247.135589] Bluetooth: hci0: command tx timeout [ 247.199582] Bluetooth: hci1: command tx timeout [ 247.264529] Bluetooth: hci2: command tx timeout [ 247.519538] Bluetooth: hci4: command tx timeout [ 247.583578] Bluetooth: hci3: command tx timeout [ 247.584067] Bluetooth: hci6: command tx timeout [ 247.647776] Bluetooth: hci5: command tx timeout [ 247.648268] Bluetooth: hci7: command tx timeout [ 249.183557] Bluetooth: hci0: command tx timeout [ 249.249495] Bluetooth: hci1: command tx timeout [ 249.311771] Bluetooth: hci2: command tx timeout [ 249.567713] Bluetooth: hci4: command tx timeout [ 249.631582] Bluetooth: hci6: command tx timeout [ 249.632073] Bluetooth: hci3: command tx timeout [ 249.695737] Bluetooth: hci7: command tx timeout [ 249.696267] Bluetooth: hci5: command tx timeout [ 251.232221] Bluetooth: hci0: command tx timeout [ 251.296129] Bluetooth: hci1: command tx timeout [ 251.361354] Bluetooth: hci2: command tx timeout [ 251.615583] Bluetooth: hci4: command tx timeout [ 251.679694] Bluetooth: hci3: command tx timeout [ 251.680232] Bluetooth: hci6: command tx timeout [ 251.745689] Bluetooth: hci5: command tx timeout [ 251.746256] Bluetooth: hci7: command tx timeout [ 305.459677] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.468726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.476882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.489096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.496321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.537248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.543571] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.556781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.564933] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.566591] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.570382] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.580442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.583361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.594279] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.599383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.736296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.741218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.744033] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.750406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.754846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.776852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.796856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.811061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.821432] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.827039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.888216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.914430] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.929359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.959086] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.962617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.968824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 306.007203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 306.016799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 306.020996] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 306.026953] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 306.034149] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 306.049222] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.056578] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.077989] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 306.134024] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 307.551787] Bluetooth: hci0: command tx timeout [ 307.615833] Bluetooth: hci1: command tx timeout [ 307.681524] Bluetooth: hci2: command tx timeout [ 307.807594] Bluetooth: hci3: command tx timeout [ 307.936800] Bluetooth: hci4: command tx timeout [ 308.064053] Bluetooth: hci5: command tx timeout [ 308.255584] Bluetooth: hci6: command tx timeout [ 308.255611] Bluetooth: hci7: command tx timeout [ 309.601510] Bluetooth: hci0: command tx timeout [ 309.665032] Bluetooth: hci1: command tx timeout [ 309.728506] Bluetooth: hci2: command tx timeout [ 309.855735] Bluetooth: hci3: command tx timeout [ 309.983539] Bluetooth: hci4: command tx timeout [ 310.111568] Bluetooth: hci5: command tx timeout [ 310.303671] Bluetooth: hci6: command tx timeout [ 310.305129] Bluetooth: hci7: command tx timeout [ 311.648706] Bluetooth: hci0: command tx timeout [ 311.712713] Bluetooth: hci1: command tx timeout [ 311.775551] Bluetooth: hci2: command tx timeout [ 311.904500] Bluetooth: hci3: command tx timeout [ 312.032729] Bluetooth: hci4: command tx timeout [ 312.160543] Bluetooth: hci5: command tx timeout [ 312.351797] Bluetooth: hci7: command tx timeout [ 312.351871] Bluetooth: hci6: command tx timeout [ 313.695667] Bluetooth: hci0: command tx timeout [ 313.760562] Bluetooth: hci1: command tx timeout [ 313.824663] Bluetooth: hci2: command tx timeout [ 313.955531] Bluetooth: hci3: command tx timeout [ 314.079533] Bluetooth: hci4: command tx timeout [ 314.207547] Bluetooth: hci5: command tx timeout [ 314.399968] Bluetooth: hci7: command tx timeout [ 314.400060] Bluetooth: hci6: command tx timeout [ 367.732208] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.739182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.742415] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.755783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.762922] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.876701] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.891004] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.897074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.914034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.923105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 368.136533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.172104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.174631] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.176767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.179343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.182633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.184246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.184296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.186230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.191988] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.198384] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.200415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.204980] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 368.207157] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 368.221364] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.241955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.244034] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.248580] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.258225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.263065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.263212] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.272060] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.274237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.308747] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.332833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.364097] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.374925] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.383054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.412816] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.419977] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 369.824597] Bluetooth: hci0: command tx timeout [ 370.015620] Bluetooth: hci1: command tx timeout [ 370.271818] Bluetooth: hci4: command tx timeout [ 370.399759] Bluetooth: hci3: command tx timeout [ 370.400401] Bluetooth: hci5: command tx timeout [ 370.464497] Bluetooth: hci7: command tx timeout [ 370.527555] Bluetooth: hci2: command tx timeout [ 370.528850] Bluetooth: hci6: command tx timeout [ 371.872525] Bluetooth: hci0: command tx timeout [ 372.065013] Bluetooth: hci1: command tx timeout [ 372.319534] Bluetooth: hci4: command tx timeout [ 372.450116] Bluetooth: hci3: command tx timeout [ 372.451426] Bluetooth: hci5: command tx timeout [ 372.512572] Bluetooth: hci7: command tx timeout [ 372.575806] Bluetooth: hci6: command tx timeout [ 372.576205] Bluetooth: hci2: command tx timeout [ 373.920699] Bluetooth: hci0: command tx timeout [ 374.112639] Bluetooth: hci1: command tx timeout [ 374.370485] Bluetooth: hci4: command tx timeout [ 374.496854] Bluetooth: hci5: command tx timeout [ 374.497291] Bluetooth: hci3: command tx timeout [ 374.560766] Bluetooth: hci7: command tx timeout [ 374.623630] Bluetooth: hci2: command tx timeout [ 374.624064] Bluetooth: hci6: command tx timeout [ 375.968681] Bluetooth: hci0: command tx timeout [ 376.160890] Bluetooth: hci1: command tx timeout [ 376.415723] Bluetooth: hci4: command tx timeout [ 376.544782] Bluetooth: hci3: command tx timeout [ 376.545221] Bluetooth: hci5: command tx timeout [ 376.607547] Bluetooth: hci7: command tx timeout [ 376.671541] Bluetooth: hci6: command tx timeout [ 376.671970] Bluetooth: hci2: command tx timeout VM DIAGNOSIS: 15:31:52 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88800ba484d8 RDI=ffff88803554dd00 RBP=ffff88800ba484d8 RSP=ffff88802a347a80 R8 =00000000ffffffff R9 =fffff9400004474e R10=0000000000000001 R11=0000000000000001 R12=ffff88803554d280 R13=ffff88803554dcd8 R14=00000000ffffffff R15=ffff88803554dd00 RIP=ffffffff84b41930 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5aab1c5540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5aab1d3000 CR3=0000000027416000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000094df1 RCX=1ffffffff0c83f88 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf31850 RBP=ffffffff8641f0f8 RSP=ffff88806cf08ba8 R8 =0000000000000000 R9 =fffffbfff0c83e0a R10=ffffffff8641f057 R11=0000000000094df1 R12=ffff88806cf37d40 R13=0000000000000000 R14=ffffffff8641fc44 R15=ffff8880e571b000 RIP=ffffffff84b419e6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd725fa91f0 CR3=000000000d9d9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000