Warning: Permanently added '[localhost]:51986' (ECDSA) to the list of known hosts. 2024/10/22 05:40:24 fuzzer started 2024/10/22 05:40:25 dialing manager at localhost:45639 syzkaller login: [ 73.815405] cgroup: Unknown subsys name 'net' [ 73.952860] cgroup: Unknown subsys name 'cpuset' [ 73.967523] cgroup: Unknown subsys name 'rlimit' 2024/10/22 05:40:41 syscalls: 215 2024/10/22 05:40:41 code coverage: enabled 2024/10/22 05:40:41 comparison tracing: enabled 2024/10/22 05:40:41 extra coverage: enabled 2024/10/22 05:40:41 setuid sandbox: enabled 2024/10/22 05:40:41 namespace sandbox: enabled 2024/10/22 05:40:41 Android sandbox: enabled 2024/10/22 05:40:41 fault injection: enabled 2024/10/22 05:40:41 leak checking: enabled 2024/10/22 05:40:41 net packet injection: enabled 2024/10/22 05:40:41 net device setup: enabled 2024/10/22 05:40:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/22 05:40:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/22 05:40:41 USB emulation: enabled 2024/10/22 05:40:41 hci packet injection: enabled 2024/10/22 05:40:41 wifi device emulation: enabled 2024/10/22 05:40:41 802.15.4 emulation: enabled 2024/10/22 05:40:41 fetching corpus: 0, signal 0/0 (executing program) 2024/10/22 05:40:43 starting 8 fuzzer processes 05:40:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x401, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000011) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "b772663f9fcd81381da3e11d0d4e1dbda0206afc6fd3f6b3e924eb269f3923a9"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x800) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000640), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000008c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x46}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000a40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r5, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc880}, 0x4004) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x20, 0x1000, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) 05:40:43 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x88, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb0}}]}, 0x88}}, 0x4080840) r2 = dup(r0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r5, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x2}}, ["", "", "", "", ""]}, 0x24}}, 0x4800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000840)={0x6, 0x2, 'client1\x00', 0x4, "0a47d4bea40bf52f", "1059880999ddd26b14965a9b73bb578ad9b91e86b74e4871c395a922bc9beef5", 0x1000000, 0xa751}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x401}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84848}, 0x4) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000a40)={{0x3a, 0x9}, 'port1\x00', 0x2d, 0x20002, 0x6, 0x4, 0x56b, 0xffffffff, 0x61b187e3, 0x0, 0x2, 0x5b}) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x18}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x81) 05:40:43 executing program 2: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x13, @l2={'eth', 0x3a, 'wg1\x00'}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x5) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/32, 0x20, 0x6, &(0x7f0000000180)={0x0, 0x989680}) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0)="9bfb45bc26b2b4bfd2f974f02ea2f0249ca231e254224c16b9bcf9ef11c706ec401c1aae4455cc6269a6bd73bbddd0c1780db20c11560ccad94e877232e4aaef9e32d00eb134e94d022b4191707482319430e5911994dbeac55a5ed1c6050b9cdff26894abc2974e6b0fa90a62df23a266a8a89e762d87163994f0d902e8744e324326ef0b9cddbf29733b602bb0292f74c6aceb4643bb16a170c33a6a5d026eb9de339ee1b446ea72fbe7161080e48d438cb8274f01c74620dd6cd08d7f072cecf859e4be366810c3a2338faf629ed9712288248bfb52119fc4671b518a", 0xde, 0x8, &(0x7f00000002c0)={0x0, 0x3938700}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000300)={0xa8e8, 0x3, 0x1, 0x8}, &(0x7f0000000340)) openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x98040, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x200, 0x0, 0x1d}, 0x18) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nr0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x28000}, 0x4008081) mq_timedsend(r1, &(0x7f00000005c0)="07c31e3b2297fffcef4e5c7d744033e84f741170b78b4dead189153523ed9d41ebdce37f7eacee6e63b5765b47100d0b260a43a3bb8840d999569a2eeab0f6751f4e55e2cd65d8ec2c539da4f3ebfffd93c1c48f8b0548a4291eb8699ff03837a3ff42311cfbaf187e04271deefa4d36b9915566d151245521f8fc37b55a9dcc6663d36a4488a980bebf2e487aa9b6e30fbf6686895c", 0x96, 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000680)='tasks\x00', 0x2, 0x0) mq_getsetattr(r1, &(0x7f00000006c0)={0x100000001, 0x8, 0x7, 0x1}, &(0x7f0000000700)) clock_gettime(0x2, &(0x7f0000000740)) semctl$GETPID(0x0, 0x1, 0xb, &(0x7f0000000780)=""/38) mq_open(&(0x7f00000007c0)='TIPC\x00', 0x2, 0xa0, &(0x7f0000000800)={0x1, 0x3f, 0xfffffffffffffffa}) r2 = perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x30, 0x1f, 0x7, 0x81, 0x0, 0x3, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp={&(0x7f0000000840)}, 0x1000, 0x5, 0x7, 0x4, 0x9, 0x4, 0x8ade, 0x0, 0x4, 0x0, 0x4}, 0xffffffffffffffff, 0x7, r1, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000900)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x7fffffff, @link='syz0\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20080894}, 0x0) clock_gettime(0x0, &(0x7f0000000b80)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000a80)=""/231, 0xe7, 0x48000000000, &(0x7f0000000bc0)={r4, r5+60000000}) 05:40:43 executing program 3: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0), 0x200a02, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r1, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2b}}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4050) r3 = dup3(r2, r2, 0x80000) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000200)) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r2) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r6, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc4}, 0x44040) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, r7, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048080}, 0x4040) openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x20000, 0x0) r8 = mq_open(&(0x7f0000000700)='/dev/vcsa\x00', 0x2, 0x4, &(0x7f0000000740)={0x5, 0x7fff, 0xfffffffffffffffd, 0x9}) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000780)={0x0, r8, 0x95, 0x5, 0xfff, 0x100000001}) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x7c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:null_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r10 = dup3(r3, r0, 0x80000) perf_event_open(&(0x7f0000000980)={0x3, 0x80, 0x9, 0x7f, 0x3, 0x4, 0x0, 0x1, 0x40020, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000940), 0xc}, 0xd040, 0xf4b, 0x6, 0x3, 0x80, 0xc974, 0x400, 0x0, 0xdd, 0x0, 0x1}, 0x0, 0xe, r10, 0x3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r2, {0x4850}}, './file0\x00'}) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xa8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4048001}, 0x45) [ 91.696867] audit: type=1400 audit(1729575643.707:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:40:43 executing program 4: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1010204}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80000001, @link='syz1\x00'}}}, ["", ""]}, 0x68}}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x10, 0x2, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, 0x0, 0x210, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xfc01}}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xc0, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd3d}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040010) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000800)={0x0, 0xffffffffffffffff, 0x7ef3, 0x80000001, 0x78a}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), r1) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x64, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x64}}, 0x24000081) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0xc810) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000c80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r5, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x8800) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xcc, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:devicekit_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:tun_tap_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_exec_t:s0\x00'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40081}, 0x4004000) 05:40:43 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = dup(r0) r2 = memfd_secret(0x80000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240000c0}, 0x24040000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x80041, 0x0) r4 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0x410, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x23}, @val={0x8}, @val={0xc, 0x99, {0x7f7b, 0x21}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x32}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}}, 0x2400404c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r7) r9 = getpgrp(r4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r8, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x55}, @val={0x8}, @val={0xc, 0x99, {0xfffffffb, 0x13}}}}, [@NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x2d}}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x44}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x48}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000810) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4811) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700), 0x8100, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000780)={0x0, @remote, @empty}, &(0x7f00000007c0)=0xc) sendmsg$GTP_CMD_GETPDP(r10, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_VERSION={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40005}, 0x8001) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/crypto\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r12, 0xc0189373, &(0x7f0000000980)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file1\x00'}) 05:40:43 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x20004010) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x81) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/sockstat\x00') r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r5, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000540)=""/240, 0xf0, 0xc000000000000, &(0x7f0000000680)={r6, r7+10000000}) r8 = open(&(0x7f00000006c0)='./file0\x00', 0x200, 0x0) sendmsg$AUDIT_GET(r8, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3e8, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r2) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x1) mq_timedreceive(r8, &(0x7f0000000980)=""/217, 0xd9, 0x5, &(0x7f0000000a80)={0x0, 0x3938700}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000ac0), r10) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r8}, {0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r4}]}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 05:40:43 executing program 7: ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x64fc, 0x0, 'client1\x00', 0x3, "957036040527921a", "234727c968d74c35ab5f309ea87290272810ef8e07c861bf546afbc23e7bf022", 0x200, 0x2}) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r0 = memfd_secret(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40881) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/wireless\x00') ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000240)={0x0, r2, 0x6, 0x7, 0x5, 0x81}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x820, 0x40, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c8d0}, 0x0) setns(r1, 0x20000) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xffffffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000d0}, 0x40) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x402, 0x170) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3d}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xff}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfd}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004001}, 0x10) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) r6 = gettid() syz_open_procfs(r6, &(0x7f0000000680)='fd\x00') r7 = semget$private(0x0, 0x1, 0x100) semctl$GETPID(r7, 0x2, 0xb, &(0x7f00000006c0)=""/174) [ 93.191449] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.192903] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.194229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.206402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.211681] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.213609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.267802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.270640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.275488] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.276459] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.278157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.286398] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.288918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.294297] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.295380] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.300374] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.306641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.320015] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.321613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.327537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.331453] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.333028] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.336445] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.338763] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.340163] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.341360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.343969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.344868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.352713] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.356743] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.359831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.366605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 93.368782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.370415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.374408] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.379690] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.379926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.382103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.383954] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.386672] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.392455] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.407295] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.410293] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.410435] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.411608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.417957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.426474] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.431494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 95.283516] Bluetooth: hci0: command tx timeout [ 95.346507] Bluetooth: hci2: command tx timeout [ 95.410570] Bluetooth: hci6: command tx timeout [ 95.411260] Bluetooth: hci7: command tx timeout [ 95.411374] Bluetooth: hci1: command tx timeout [ 95.474409] Bluetooth: hci3: command tx timeout [ 95.475076] Bluetooth: hci4: command tx timeout [ 95.538275] Bluetooth: hci5: command tx timeout [ 97.331329] Bluetooth: hci0: command tx timeout [ 97.394238] Bluetooth: hci2: command tx timeout [ 97.458273] Bluetooth: hci7: command tx timeout [ 97.458736] Bluetooth: hci6: command tx timeout [ 97.459553] Bluetooth: hci1: command tx timeout [ 97.522292] Bluetooth: hci3: command tx timeout [ 97.523318] Bluetooth: hci4: command tx timeout [ 97.587283] Bluetooth: hci5: command tx timeout [ 99.378208] Bluetooth: hci0: command tx timeout [ 99.442271] Bluetooth: hci2: command tx timeout [ 99.508196] Bluetooth: hci6: command tx timeout [ 99.508224] Bluetooth: hci1: command tx timeout [ 99.508660] Bluetooth: hci7: command tx timeout [ 99.571282] Bluetooth: hci4: command tx timeout [ 99.571761] Bluetooth: hci3: command tx timeout [ 99.634398] Bluetooth: hci5: command tx timeout [ 101.426210] Bluetooth: hci0: command tx timeout [ 101.492183] Bluetooth: hci2: command tx timeout [ 101.554302] Bluetooth: hci1: command tx timeout [ 101.554784] Bluetooth: hci6: command tx timeout [ 101.555287] Bluetooth: hci7: command tx timeout [ 101.619219] Bluetooth: hci3: command tx timeout [ 101.619705] Bluetooth: hci4: command tx timeout [ 101.682246] Bluetooth: hci5: command tx timeout [ 153.520687] syz-executor.4 (287) used greatest stack depth: 23616 bytes left [ 155.839151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.840863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.842555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.844908] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.848492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.849590] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.964513] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.966583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.967723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.974626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.976545] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.978399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.003648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.010563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.012551] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.016698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.023441] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.026006] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.027457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.031679] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.040595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.048398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.050390] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.051860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.055201] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.060444] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.065155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.068435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.069810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.071669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.074330] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.078812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.079754] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.090686] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.092175] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.099620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.102088] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.103918] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.105053] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.122326] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.130090] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.132523] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.138526] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.139525] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.182381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.204416] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.208509] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.209861] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.875643] Bluetooth: hci0: command tx timeout [ 158.003205] Bluetooth: hci1: command tx timeout [ 158.066694] Bluetooth: hci2: command tx timeout [ 158.131313] Bluetooth: hci3: command tx timeout [ 158.133049] Bluetooth: hci6: command tx timeout [ 158.195320] Bluetooth: hci5: command tx timeout [ 158.197419] Bluetooth: hci4: command tx timeout [ 158.325483] Bluetooth: hci7: command tx timeout [ 159.923227] Bluetooth: hci0: command tx timeout [ 160.051393] Bluetooth: hci1: command tx timeout [ 160.116197] Bluetooth: hci2: command tx timeout [ 160.180223] Bluetooth: hci3: command tx timeout [ 160.180702] Bluetooth: hci6: command tx timeout [ 160.243228] Bluetooth: hci5: command tx timeout [ 160.243705] Bluetooth: hci4: command tx timeout [ 160.370186] Bluetooth: hci7: command tx timeout [ 161.970193] Bluetooth: hci0: command tx timeout [ 162.099353] Bluetooth: hci1: command tx timeout [ 162.162229] Bluetooth: hci2: command tx timeout [ 162.227246] Bluetooth: hci6: command tx timeout [ 162.227729] Bluetooth: hci3: command tx timeout [ 162.291231] Bluetooth: hci4: command tx timeout [ 162.291716] Bluetooth: hci5: command tx timeout [ 162.420255] Bluetooth: hci7: command tx timeout [ 164.018275] Bluetooth: hci0: command tx timeout [ 164.146248] Bluetooth: hci1: command tx timeout [ 164.210589] Bluetooth: hci2: command tx timeout [ 164.275304] Bluetooth: hci3: command tx timeout [ 164.275786] Bluetooth: hci6: command tx timeout [ 164.338323] Bluetooth: hci5: command tx timeout [ 164.339724] Bluetooth: hci4: command tx timeout [ 164.467149] Bluetooth: hci7: command tx timeout [ 218.220507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.222965] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.234954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.239238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.247966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.249668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.252273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.254270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.256365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.259573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.261978] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.264043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.402907] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.411785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.412940] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.426874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.433677] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.438549] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.440362] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.448571] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.449749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.458406] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.470937] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.477563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.509723] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.525363] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.546694] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.551469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.553440] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.566339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.568375] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.572884] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.574725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.576832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.581398] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.583331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.586753] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.589244] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.597016] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.599017] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.600650] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.602903] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.604964] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.663399] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.664939] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.665614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.677364] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.687642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.338240] Bluetooth: hci1: command tx timeout [ 220.339785] Bluetooth: hci0: command tx timeout [ 220.467411] Bluetooth: hci2: command tx timeout [ 220.594330] Bluetooth: hci3: command tx timeout [ 220.664206] Bluetooth: hci7: command tx timeout [ 220.723220] Bluetooth: hci5: command tx timeout [ 220.786367] Bluetooth: hci6: command tx timeout [ 220.915231] Bluetooth: hci4: command tx timeout [ 222.387242] Bluetooth: hci0: command tx timeout [ 222.387807] Bluetooth: hci1: command tx timeout [ 222.514378] Bluetooth: hci2: command tx timeout [ 222.642208] Bluetooth: hci3: command tx timeout [ 222.706333] Bluetooth: hci7: command tx timeout [ 222.771652] Bluetooth: hci5: command tx timeout [ 222.835494] Bluetooth: hci6: command tx timeout [ 222.962341] Bluetooth: hci4: command tx timeout [ 224.435214] Bluetooth: hci1: command tx timeout [ 224.435754] Bluetooth: hci0: command tx timeout [ 224.563264] Bluetooth: hci2: command tx timeout [ 224.690206] Bluetooth: hci3: command tx timeout [ 224.756292] Bluetooth: hci7: command tx timeout [ 224.818423] Bluetooth: hci5: command tx timeout [ 224.883263] Bluetooth: hci6: command tx timeout [ 225.011184] Bluetooth: hci4: command tx timeout [ 226.482243] Bluetooth: hci1: command tx timeout [ 226.482780] Bluetooth: hci0: command tx timeout [ 226.610179] Bluetooth: hci2: command tx timeout [ 226.739181] Bluetooth: hci3: command tx timeout [ 226.802366] Bluetooth: hci7: command tx timeout [ 226.866396] Bluetooth: hci5: command tx timeout [ 226.932133] Bluetooth: hci6: command tx timeout [ 227.059310] Bluetooth: hci4: command tx timeout [ 280.521450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.522900] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.523998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.538041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.540705] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.542642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.542702] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.548984] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.550484] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.553781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.555673] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.558901] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.577421] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.578807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.580205] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.583622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.586783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.590351] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.636823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.642415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.645881] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.695943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.702810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.707975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.712478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.713502] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.721687] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.766207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.773428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.779682] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.798711] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.800121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.807413] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.808727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.812839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.814814] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.816244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.819458] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.823687] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.852333] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.856557] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.858145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.861065] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.863020] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.864379] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 280.890686] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.922163] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.926472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.610324] Bluetooth: hci2: command tx timeout [ 282.611513] Bluetooth: hci1: command tx timeout [ 282.612146] Bluetooth: hci0: command tx timeout [ 282.802208] Bluetooth: hci3: command tx timeout [ 282.866389] Bluetooth: hci6: command tx timeout [ 282.867518] Bluetooth: hci4: command tx timeout [ 282.930287] Bluetooth: hci7: command tx timeout [ 283.123230] Bluetooth: hci5: command tx timeout [ 284.659262] Bluetooth: hci1: command tx timeout [ 284.659819] Bluetooth: hci0: command tx timeout [ 284.660786] Bluetooth: hci2: command tx timeout [ 284.852165] Bluetooth: hci3: command tx timeout [ 284.915208] Bluetooth: hci6: command tx timeout [ 284.915730] Bluetooth: hci4: command tx timeout [ 284.979384] Bluetooth: hci7: command tx timeout [ 285.170267] Bluetooth: hci5: command tx timeout [ 286.707198] Bluetooth: hci1: command tx timeout [ 286.707722] Bluetooth: hci2: command tx timeout [ 286.708249] Bluetooth: hci0: command tx timeout [ 286.898368] Bluetooth: hci3: command tx timeout [ 286.962193] Bluetooth: hci4: command tx timeout [ 286.962664] Bluetooth: hci6: command tx timeout [ 287.027167] Bluetooth: hci7: command tx timeout [ 287.218683] Bluetooth: hci5: command tx timeout [ 288.755238] Bluetooth: hci0: command tx timeout [ 288.755775] Bluetooth: hci2: command tx timeout [ 288.756966] Bluetooth: hci1: command tx timeout [ 288.948121] Bluetooth: hci3: command tx timeout [ 289.010385] Bluetooth: hci6: command tx timeout [ 289.011882] Bluetooth: hci4: command tx timeout [ 289.074464] Bluetooth: hci7: command tx timeout [ 289.266288] Bluetooth: hci5: command tx timeout [ 343.130852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.133779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.134823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.139374] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.140806] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.141785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.144927] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.177739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.180835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.184617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.188717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.189962] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.194984] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.196867] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.198254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.204447] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.210654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.215701] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.216783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.222350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.223533] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.224852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.227544] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.229007] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.230180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.232276] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.254561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.255554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.306605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.309226] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.309229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.312661] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.313242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.314485] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.316508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.334309] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.334747] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.337313] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.359457] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.363670] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.365381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.378529] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.379897] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.381501] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.387372] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.415369] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.419782] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.426868] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.203203] Bluetooth: hci1: command tx timeout [ 345.266482] Bluetooth: hci2: command tx timeout [ 345.267536] Bluetooth: hci0: command tx timeout [ 345.330160] Bluetooth: hci3: command tx timeout [ 345.394357] Bluetooth: hci4: command tx timeout [ 345.395584] Bluetooth: hci5: command tx timeout [ 345.458788] Bluetooth: hci6: command tx timeout [ 345.459705] Bluetooth: hci7: command tx timeout [ 347.251271] Bluetooth: hci1: command tx timeout [ 347.315421] Bluetooth: hci0: command tx timeout [ 347.315978] Bluetooth: hci2: command tx timeout [ 347.378256] Bluetooth: hci3: command tx timeout [ 347.444205] Bluetooth: hci5: command tx timeout [ 347.444748] Bluetooth: hci4: command tx timeout [ 347.506256] Bluetooth: hci6: command tx timeout [ 347.506821] Bluetooth: hci7: command tx timeout [ 349.299387] Bluetooth: hci1: command tx timeout [ 349.363329] Bluetooth: hci0: command tx timeout [ 349.363885] Bluetooth: hci2: command tx timeout [ 349.426559] Bluetooth: hci3: command tx timeout [ 349.491183] Bluetooth: hci4: command tx timeout [ 349.491746] Bluetooth: hci5: command tx timeout [ 349.555236] Bluetooth: hci6: command tx timeout [ 349.555770] Bluetooth: hci7: command tx timeout [ 351.347213] Bluetooth: hci1: command tx timeout [ 351.411258] Bluetooth: hci2: command tx timeout [ 351.411811] Bluetooth: hci0: command tx timeout [ 351.474685] Bluetooth: hci3: command tx timeout [ 351.540130] Bluetooth: hci5: command tx timeout [ 351.540634] Bluetooth: hci4: command tx timeout [ 351.602191] Bluetooth: hci7: command tx timeout [ 351.602779] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 05:45:44 Registers: info registers vcpu 0 RAX=00000000000000cf RBX=0000000000000001 RCX=0000000000000001 RDX=ffff88802b24fc01 RSI=ffff88802b24fce0 RDI=ffff88802b24fce0 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a00 R8 =0000000000000001 R9 =ffff88806ce09ab8 R10=000000000003c001 R11=000000000001ce9b R12=ffff88806ce09ad8 R13=ffff88806ce09ac0 R14=ffff88802b24fce0 R15=ffff88806ce09a78 RIP=ffffffff811484b3 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f4042e6b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4042ecf940 CR3=000000002d27e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffff88803386a9a8 RBX=ffff88803386a9a8 RCX=ffffffff847dd434 RDX=ffff88800b279b80 RSI=ffffffff84795912 RDI=0000000000000001 RBP=dffffc0000000000 RSP=ffff88800aebf7d0 R8 =0000000000000000 R9 =ffffed1002a33725 R10=0000000000000008 R11=0000000000000116 R12=ffff88803386a9a0 R13=ffff88803386a998 R14=ffff88803386a8c0 R15=00000000ffffffff RIP=ffffffff8121c118 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe3600000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe12acef60 CR3=00000000344d4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00ff0000000000000000000000ff0000 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000