Warning: Permanently added '[localhost]:31343' (ECDSA) to the list of known hosts.
2025/01/23 05:32:41 fuzzer started
2025/01/23 05:32:42 dialing manager at localhost:38529
syzkaller login: [   67.927584] cgroup: Unknown subsys name 'net'
[   68.032024] cgroup: Unknown subsys name 'cpuset'
[   68.052447] cgroup: Unknown subsys name 'rlimit'
[   73.675558] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/23 05:32:59 syscalls: 203
2025/01/23 05:32:59 code coverage: enabled
2025/01/23 05:32:59 comparison tracing: enabled
2025/01/23 05:32:59 extra coverage: enabled
2025/01/23 05:32:59 setuid sandbox: enabled
2025/01/23 05:32:59 namespace sandbox: enabled
2025/01/23 05:32:59 Android sandbox: enabled
2025/01/23 05:32:59 fault injection: enabled
2025/01/23 05:32:59 leak checking: enabled
2025/01/23 05:32:59 net packet injection: enabled
2025/01/23 05:32:59 net device setup: enabled
2025/01/23 05:32:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/23 05:32:59 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/23 05:32:59 USB emulation: enabled
2025/01/23 05:32:59 hci packet injection: enabled
2025/01/23 05:32:59 wifi device emulation: enabled
2025/01/23 05:32:59 802.15.4 emulation: enabled
2025/01/23 05:32:59 fetching corpus: 0, signal 0/0 (executing program)
2025/01/23 05:33:01 starting 8 fuzzer processes
05:33:01 executing program 1:
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000000))
write$hidraw(0xffffffffffffffff, &(0x7f0000000040)="bd34", 0x2)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x40000000}}, './file0\x00'})
write$hidraw(r0, &(0x7f00000000c0)="d02947d96525be65bb5349d5c740e1cca84af5e123587b24fabff3f0f2ee76e329b2d6a77e16570265d4cb55055ddac4dd5bf7a23c9ea27121188ca53c071ad8ad81a944d1ae5fa7df414221c0553d7b2d7f11232ba7c3b0b2bcb541f95b0f8b8572cbccbc32e08f15605cc6eddf2a2b14ec3e84bf2ca80488ae58e8a52892204bab9ab063a5fe275f02844c4b7703dfcf473e7c56b5fbf1765c1f2a", 0x9c)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f00000001c0)={0x2c5, "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"})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
socketpair(0x1f, 0x2, 0xde6, &(0x7f0000000500)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r4=>r0, {0x6}}, './file0\x00'})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, 0x0, 0x8, 0x70bd25, 0x2000, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20008000)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r5=>r4, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, <r6=>r2, {<r7=>r0}}, './file0/file0\x00'})
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/115, 0x73}, 0x9}], 0x1, 0x0, &(0x7f0000000880)={r8, r9+60000000})
ioctl$HIDIOCGRAWNAME(r4, 0x80404804, &(0x7f00000008c0))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r10=>r7}, './file0/file0\x00'})
ioctl$TIOCSISO7816(r10, 0xc0285443, &(0x7f0000000940)={0x1, 0x0, 0x8, 0x7, 0x3})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, <r11=>r5, {0x5}}, './file0/file0\x00'})
sendmsg$TIPC_NL_NODE_GET(r11, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x8c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffeffff}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6c}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfb}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

05:33:01 executing program 0:
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4000850)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0xfffffff7, 0x1000, 0x6, {0x43, 0x148cc1dc}, 0x3a81e0fd})
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={0x0, 0x1, r1, 0xc0000000, 0x80000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000200)={0x3, 0x7fff, 0x3c, {0x8, 0x2}, 0x3f, 0x4})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='dctcp\x00', 0x6)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x24c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private0, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_BEARER={0x1a8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x150, @mcast2, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3f, @local, 0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xfffffff9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfa89}}, {0x20, 0x2, @in6={0xa, 0x5, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfffffd5a}}}}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8104}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6fba}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r3=>r1, {0x800}}, './file0\x00'})
setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000640)="2a1583c68668112c3886eea174bb36fa5e832596dd69b2f3d007062a7a90c52f9a95c6df70fca3ea697e73d1b0c161c32fdca70a8d4e0806cae8eb9b9dd5ba5c323894dd64e6eb765675ea3616d1ef9a55bf3689afdf1d202a9e13413d6d895dd4819b", 0x63)
sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3e2}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0xc0c4}, 0x240088d0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/bus/input/devices\x00', 0x0, 0x0)
openat$cgroup_netprio_ifpriomap(r4, &(0x7f0000000880), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a85352, &(0x7f00000008c0)={{0x2, 0x7}, 'port1\x00', 0x43, 0x2, 0x5, 0x4, 0x1, 0x5f, 0x4, 0x0, 0x6, 0x4})
r5 = syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r4)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000ac0)=""/127)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400081}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, r6, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090)

05:33:01 executing program 2:
sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008805)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r0=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040040}, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r1)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r2, 0x8, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20008811}, 0x8c0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000081)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000700)={&(0x7f00000005c0), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x49}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000018}, 0x8004)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x380, &(0x7f00000008c0)={[{0x71, 0x4e00, "61d88110f5e79d0993137aba248b26cbd5fb8d5dc5fb37335409430574b3c721545267bffbb713ada147888dcca9b181ab2c6fe0f7fa6d4e70fd720f80ad27b8727a9429093938741b38467c0fe7adcb045c4a49cfefbdf1ba2bf7167094c72d33dd9fb909b915fc46bce1eed149862cc9"}, {0x7e, 0x4e00, "58f1084ab747f30183ae6b50a1b4c6b2e3f7621fd1c79b5422f0e4dbf3926c700277153b7ce5fb2fd13ef6e8b3a2262431b0dd36c5faab5c5ea6a532e98126975bdb9564644162ecf741767013cf80f6b1f8402264348f793c8ff1a6f2070094ff16cb56b546a6d1da939dc46197bd9700339d2901c1e780cdf00caf3781"}, {0x7b, 0x4e00, "8490599a53f4affe4f65bc0a201b34488dd2ea3643b8ad17316333f5391fd184652cb75732797113cba88f314ca1a4b3255758ae4a7fb2102082b98fb89d8af24742b81e34e7fda51d319ae975417428d1537fcde0651404ee0b6bcdbb3af49abf3ee76a39749b97cd6ba55c149a1ade9061ee2d2afae75c734059"}, {0x9a, 0x4e00, "ee7c958144de9de2f5c9baca8d78b031c566cf1f3d2305d35066ad976237ded46182f5c1e1d8c81294713294eb1d0f59f415a193755534f397514bd2d09f96037e56a7ab4ed0182211adfe6c87c256855db2b7b27ef5fa93fb1d0900549c0a672a46855fe309133bdc91aaf3c460fd38c808d135b394b1a8e31792644a8bb90280fadba4c0ef45291395e5bb2ae0a6eb9cad72ce9a981b3fff9a"}, {0x7d, 0x4e00, "12bf5133fb6bc850ccbb7f328e182805bf7102c9d4c9f33c1b829f0506da9bfa6dfb642efb91ac0ca345940746abfa18e894b1e234f78065dd4afa879a67637aee31bc59b0bad9b59a42f787396f7348a35fdc2f94bb0490a6dbf0fe4def56bb58917131102777a38b992281343eecd127087a75ec553b9138588b3f2a"}, {0x57, 0x4e00, "87733efa5c5d3447c61aab7176d0c2752e458af0504ff6abfffb1a4ce34adbee417c98e814b63f5e71823246ee1f8e67bb6797ccc9e11e10b06463cd5edef39ccfb50dee1f7ddc0ba8bac8ac4287fda0b86ca53ebe2ddd"}, {0x7d, 0x4e00, "c202dbdbd730b49ad8a0538fa4380b484bee1097a313e8d15a323e5c28a42b8b82f7b540d570f38c605cca271134084e63fefd5ca1eb91abf483d221b3f21cc091ef20b4c20854b8f7656309c968c80a087137e6abd7b52f97325dfceb9392e0a9cc4655efc778ea2497cb33e9b07c10bf789def3699b7c936f851d78d"}]})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000fc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x28c, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x1b0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bd2948663eb3864cfc49ccc09cfca8359403f04a799f40239e0b558a146f4c09"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_KEY_ATTR_ID={0x88, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "917fc34d28b08efc1e108208d8ad1a41"}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bc18db91b61402a57f022dfb07d4ba6c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xbc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "61e2ff95f2939ce8aae215a63759881a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5f16da0388d4c51c1d154dc6ab872bd58efe5dadeacdaeecf93bf25a56aba46d"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "32d8de71a6fcfdad00512f3a8d7d40db"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0xe41a4ff3c8406314}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0f26457d37f8bed583f8028f7a180fb624eb229277b2ecf9c6f05cac002f3d62"}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8041}, 0x880)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001040), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001080)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r6, 0x620, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x400c000)
syz_genetlink_get_family_id$net_dm(&(0x7f0000001180), r1)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x40)

05:33:01 executing program 3:
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff}, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080))
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r1=>r0, @in_args={0x1}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1000)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x11c, r2, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "e23f9f41b682557e2f19c954baec9c26beb3dfcb314608e6f2ed6f930c56bba20191bf36"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ID={0x4b, 0x3, "574789b89033f24f2dd70544a43cf3f9ca2f95d23db360d8f0b88c9a538bfff0e84a7aaca92973278376afb0101a1876852239f47e000f7098936a3f8c23f0b16e0055e626a0c6"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "e744dc0bee88ec48bbea4637148b3ae2dae4a3e07715446b0e92c051617c"}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x177463e07b183b)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000440)="e915e1deb99833818f559d3aeb17f792b7892ffcd24bf851e60dc207bf2927c60eb8bc", 0x23)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xc3)
ioctl$KDGKBENT(r4, 0x4b46, &(0x7f00000005c0)={0x7, 0x7, 0x2})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000600)={{0x1, 0x1, 0x18, <r5=>r0, {0x4}}, './file0\x00'})
r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000640), 0x8000, 0x0)
r7 = openat$cgroup_int(r5, &(0x7f0000000680)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, <r8=>r7, {0x9}}, './file0\x00'})
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000700)=r8, 0x1)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, <r9=>0xffffffffffffffff}, './file0\x00'})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={<r10=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r10, {0x5}}, './file0\x00'})

[   86.737074] audit: type=1400 audit(1737610381.080:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
05:33:01 executing program 4:
write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0xf9}, @val={0x2, 0x1, 0x6, 0x96, 0x7fff, 0x8000}, @eth={@empty, @local, @void, {@llc={0x4, {@llc={0x6, 0xf8, '\b', "8700a9f132eb86676b5af3eee7c8b68becb687177982ce2b1ad15dff98ae7352a1c0e0907bddffc14f7a90024d3be387bd6221fb5d3020ae4ccc12028e76da7209797c633aa9d621979e30ac4c82a7ce8ab19f93dc73426ee53a9f6a0e0b250629f6a8eca01ac05e083b12756f42662f720273c5d8bb7a07e19c913b5a9c5251e8886279c217837ea6c478bfe5"}}}}}}, 0xac)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "b5f300b84606bea2b88ff8cc564e8fbddb8cb801026e89a1f2a637f49c47fc34"}}, @TIPC_NLA_NODE_ID={0x74, 0x3, "ffd42b433662977e85945eca96b554dd59da9ba0b6e869dbd198fc4ac9a6a6f8e356f52d44e0c12f7f4f96b377f2b7c3f196e5e7c008ab30993b6071a768ebac70fb715981d836740496fa78b1f8602f4b1cad870dc3d17b2e0f70bfb41d624bc31eed9547f79d03ce6e0cb96b0b1aef"}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x95}, 0x14)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x4}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0)={<r1=>0x0})
ioctl$HIDIOCGRDESC(r0, 0x90044802, &(0x7f0000000340)={0x8d6, "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"})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000c40)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000c80)={r1, 0x0, r2, 0x9e})
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000cc0), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000d00)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000d40)={'vxcan1\x00'})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000d80)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000dc0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000e40)=r7)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000e80)=0x7)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000ec0)={{0x1, 0x1, 0x18, <r8=>r2, {0x2ade}}, './file0\x00'})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f40), r0)
sendmsg$TIPC_CMD_DISABLE_BEARER(r8, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x2c, r9, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'vlan0\x00'}}}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000800)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff, 0x9}}, './file0\x00'})

05:33:01 executing program 5:
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff)
r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', <r1=>0x0, 0x8000, 0x7800, 0xeb9, 0x2, {{0x28, 0x4, 0x0, 0x2, 0xa0, 0x65, 0x0, 0x1f, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0x1c, 0x54, 0x0, 0x1, [0x5, 0x9, 0x4, 0xef, 0x23812bc0, 0x1]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x47, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010100]}, @generic={0x89, 0xb, "d30161345048d134d3"}, @rr={0x7, 0x2b, 0x65, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3e}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0x81, [@dev={0xac, 0x14, 0x14, 0x30}, @local]}, @timestamp_prespec={0x44, 0x1c, 0xb0, 0x3, 0xc, [{@broadcast, 0x8}, {@local, 0xdf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}]}}}}})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000800}, 0x805)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff)
geteuid()
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10000880}, 0x44088)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x7ff, 0x471f76db, 0x2, 0x6d6b}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x10)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x11}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x118, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x91, 0x3, "d8582555eae8486af2e996021cce6f8225421aae953f1aca0900cefd35abe2fcb69c2a7cae20cc09067dd6bc2ed03ce85ea1fcac4e417b714ac2dd565c80f40bdee41a07cb3c2a9b3930375d812615c36bda20dfb0ef4a1f8482443c5055f9cbd6fb1cf9d119ef5424439f917fca772937107630c029581dc4a2f98008b1006af07aa2cef6063ca29da0e9279a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4084}, 0x801)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000700), 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xa8, 0x3, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3646}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xff}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000080}, 0x48090)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000880)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x81, 0x6}}, './file0\x00'})
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x902, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f00000009c0)={0x6c00, 0x0, 0x400})
sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:klogd_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netpci0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xb0}, 0x1, 0x0, 0x0, 0x41}, 0x80000)
sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1b4, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbc8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x83}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xedca}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'gretap0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc001}, 0x1)

05:33:01 executing program 6:
r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}]}]}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb57d}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x19}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10040000}, 0xc009)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000003c0)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x74}}, 0x48800)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x24000000)
sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x6}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '%*\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x4c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xf8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x20000814)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x90)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc040)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000bc0)={{0x1, 0x1, 0x18, <r9=>r0, @in_args={0x1}}, './file0\x00'})
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000c40)={0x268, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb65}]}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'virt_wifi0\x00'}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x12, 0x3, "a035e68ccdb060a4e27eb981259f"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x184, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "48ff78bcf00c266e9e909ffd92b1f56a3471c5ead0b6cd56a64bda97ecb049baa575"}}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "b151b17dce462be56eef4945a1bc18d29e6954286afb308ff5e4d65c8d705dc5c3e5d913a8b8c04de059e0a148133c0267fd08fe60edf6c8d497bfecdf35eca0f3bdb8fb8a9b0c8513c6ef03bd5db041ea1f0859e232ecea1313c7929355d11ed56eb7952e2892102dbdd7ea947185e86ee72a496c33e6271ff24874ee1a7c936a452ca82cdd0ea85a9354ccc055a90a13a17401c4172d4b0d3d30f4a458ce77cf234f3fe0741a0afe0ae1f319914caa8e520fc425a71e"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ID={0xd, 0x3, "bd1cfdc952596e3ea9"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "69ba6552ad3d4546e12343511606a593d84fadd7"}}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x20040801}, 0x802)

05:33:01 executing program 7:
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {<r1=>0xffffffffffffffff, 0xee01}}, './file0\x00'})
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff80000000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaacd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r2=>r0, {0xc2d1}}, './file0\x00'})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x200080a1)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000400)={0x8, 0x5, 0x7f})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r3=>r2}, './file0\x00'})
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r5=>r4, {<r6=>r0}}, './file0\x00'})
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r8=>r7}, './file0\x00'})
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000540)={0xff, "bd9d6d7fe80e86c6e5ca59ea90c51fd0d7d246ffdff63ccb8ba65576ff35ae569a806933205d00d7abb71b244831ec227ea359a28193563ae5b1417bc8edf80c"})
connect$unix(r8, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/timer_list\x00', 0x0, 0x0)
r10 = syz_io_uring_setup(0x3c6a, &(0x7f0000000680)={0x0, 0xc39, 0x2, 0x1, 0x3e0, 0x0, r6}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r9, 0xc018937b, &(0x7f0000000780)={{0x1, 0x1, 0x18, r10, {r1, 0xee00}}, './file0\x00'})
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000008c0)=""/123)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000940)={{0x1, 0x1, 0x18, <r11=>r10, {0x1}}, './file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r11, 0x40182103, &(0x7f0000000a40)={0x0, 0x1, 0xffffffffffffffff, 0x101, 0x80000})

[   87.985207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.991216] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.995523] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   88.004479] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   88.008975] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   88.012524] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   88.181168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   88.187481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   88.190965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   88.199551] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   88.202558] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   88.208462] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   88.245845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   88.249335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   88.252262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   88.260171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   88.264128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   88.269248] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.299963] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   88.306475] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   88.318259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   88.328183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   88.338138] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   88.340383] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   88.340912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   88.344478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   88.345197] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   88.359261] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   88.363370] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   88.364375] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   88.366496] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   88.382198] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   88.383521] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   88.389200] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   88.391092] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   88.391934] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   88.392416] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   88.393241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   88.407383] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   88.415523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   88.419690] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   88.443688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   88.450683] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   88.452781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   88.455145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   88.466687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   88.485003] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   88.487570] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   90.068572] Bluetooth: hci0: command tx timeout
[   90.259889] Bluetooth: hci1: command tx timeout
[   90.324685] Bluetooth: hci2: command tx timeout
[   90.388066] Bluetooth: hci3: command tx timeout
[   90.452833] Bluetooth: hci5: command tx timeout
[   90.453209] Bluetooth: hci4: command tx timeout
[   90.515934] Bluetooth: hci6: command tx timeout
[   90.579890] Bluetooth: hci7: command tx timeout
[   92.116055] Bluetooth: hci0: command tx timeout
[   92.307980] Bluetooth: hci1: command tx timeout
[   92.371851] Bluetooth: hci2: command tx timeout
[   92.436080] Bluetooth: hci3: command tx timeout
[   92.500415] Bluetooth: hci4: command tx timeout
[   92.500511] Bluetooth: hci5: command tx timeout
[   92.564814] Bluetooth: hci6: command tx timeout
[   92.627819] Bluetooth: hci7: command tx timeout
[   94.163975] Bluetooth: hci0: command tx timeout
[   94.356140] Bluetooth: hci1: command tx timeout
[   94.419943] Bluetooth: hci2: command tx timeout
[   94.484014] Bluetooth: hci3: command tx timeout
[   94.550077] Bluetooth: hci5: command tx timeout
[   94.550285] Bluetooth: hci4: command tx timeout
[   94.611939] Bluetooth: hci6: command tx timeout
[   94.675886] Bluetooth: hci7: command tx timeout
[   96.211916] Bluetooth: hci0: command tx timeout
[   96.403806] Bluetooth: hci1: command tx timeout
[   96.468909] Bluetooth: hci2: command tx timeout
[   96.532816] Bluetooth: hci3: command tx timeout
[   96.595834] Bluetooth: hci4: command tx timeout
[   96.595918] Bluetooth: hci5: command tx timeout
[   96.659823] Bluetooth: hci6: command tx timeout
[   96.723800] Bluetooth: hci7: command tx timeout
[  150.765629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.767445] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  150.768804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.770391] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.773089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.775274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  150.776115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.777981] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  150.782120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.788889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  150.790040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  150.793786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  150.795228] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  150.797005] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  150.800045] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.804901] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.805078] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  150.805230] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  150.809844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.810927] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  150.821986] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  150.832232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.836967] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.838292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.857082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  150.861107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  150.862409] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  150.877477] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  150.888016] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  150.890331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  150.940541] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  150.948893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  150.954024] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  150.966346] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  150.973029] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  150.979522] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  150.986216] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  150.988937] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  150.990002] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  151.003036] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  151.030493] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  151.042576] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  151.043252] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  151.076004] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  151.110054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  151.114445] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  151.115509] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  151.127876] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  152.853828] Bluetooth: hci1: command tx timeout
[  152.916015] Bluetooth: hci4: command tx timeout
[  152.916502] Bluetooth: hci3: command tx timeout
[  152.980847] Bluetooth: hci2: command tx timeout
[  152.981324] Bluetooth: hci0: command tx timeout
[  153.107862] Bluetooth: hci5: command tx timeout
[  153.172085] Bluetooth: hci6: command tx timeout
[  153.300808] Bluetooth: hci7: command tx timeout
[  154.900295] Bluetooth: hci1: command tx timeout
[  154.964864] Bluetooth: hci3: command tx timeout
[  154.965028] Bluetooth: hci4: command tx timeout
[  155.027900] Bluetooth: hci0: command tx timeout
[  155.028052] Bluetooth: hci2: command tx timeout
[  155.156091] Bluetooth: hci5: command tx timeout
[  155.220866] Bluetooth: hci6: command tx timeout
[  155.348947] Bluetooth: hci7: command tx timeout
[  156.947977] Bluetooth: hci1: command tx timeout
[  157.011876] Bluetooth: hci4: command tx timeout
[  157.012011] Bluetooth: hci3: command tx timeout
[  157.076067] Bluetooth: hci2: command tx timeout
[  157.076197] Bluetooth: hci0: command tx timeout
[  157.204342] Bluetooth: hci5: command tx timeout
[  157.268001] Bluetooth: hci6: command tx timeout
[  157.395817] Bluetooth: hci7: command tx timeout
[  158.995926] Bluetooth: hci1: command tx timeout
[  159.059877] Bluetooth: hci3: command tx timeout
[  159.059971] Bluetooth: hci4: command tx timeout
[  159.124966] Bluetooth: hci0: command tx timeout
[  159.125529] Bluetooth: hci2: command tx timeout
[  159.252831] Bluetooth: hci5: command tx timeout
[  159.316181] Bluetooth: hci6: command tx timeout
[  159.443823] Bluetooth: hci7: command tx timeout
[  212.719953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  212.727332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  212.730995] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  212.736803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  212.738964] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  212.740429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  212.837001] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.840827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.844094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.849418] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.855680] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  212.858555] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  212.961920] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.967464] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.968155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.976156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.981139] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.986884] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.097434] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.102989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.109147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.117408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.124053] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  213.126069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  213.162942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.176043] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.194510] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.206071] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.253348] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.255340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  213.275819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  213.279548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  213.284101] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  213.299301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  213.308067] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  213.313180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  213.356033] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.370382] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.382688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.407378] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.414172] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  213.420829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.439924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  213.451900] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  213.487887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  213.498945] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  213.543920] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  213.550949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  214.803832] Bluetooth: hci0: command tx timeout
[  214.867861] Bluetooth: hci1: command tx timeout
[  215.060191] Bluetooth: hci2: command tx timeout
[  215.187926] Bluetooth: hci3: command tx timeout
[  215.315894] Bluetooth: hci4: command tx timeout
[  215.445839] Bluetooth: hci6: command tx timeout
[  215.445876] Bluetooth: hci5: command tx timeout
[  215.700280] Bluetooth: hci7: command tx timeout
[  216.852215] Bluetooth: hci0: command tx timeout
[  216.917687] Bluetooth: hci1: command tx timeout
[  217.107881] Bluetooth: hci2: command tx timeout
[  217.236987] Bluetooth: hci3: command tx timeout
[  217.363918] Bluetooth: hci4: command tx timeout
[  217.498157] Bluetooth: hci5: command tx timeout
[  217.498235] Bluetooth: hci6: command tx timeout
[  217.747959] Bluetooth: hci7: command tx timeout
[  218.899831] Bluetooth: hci0: command tx timeout
[  218.964820] Bluetooth: hci1: command tx timeout
[  219.156811] Bluetooth: hci2: command tx timeout
[  219.284012] Bluetooth: hci3: command tx timeout
[  219.413792] Bluetooth: hci4: command tx timeout
[  219.539983] Bluetooth: hci5: command tx timeout
[  219.540653] Bluetooth: hci6: command tx timeout
[  219.796905] Bluetooth: hci7: command tx timeout
[  220.947885] Bluetooth: hci0: command tx timeout
[  221.012895] Bluetooth: hci1: command tx timeout
[  221.206981] Bluetooth: hci2: command tx timeout
[  221.333775] Bluetooth: hci3: command tx timeout
[  221.459827] Bluetooth: hci4: command tx timeout
[  221.587818] Bluetooth: hci6: command tx timeout
[  221.588828] Bluetooth: hci5: command tx timeout
[  221.846296] Bluetooth: hci7: command tx timeout
[  272.954964] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[  273.117637] 
[  273.117979] ======================================================
[  273.118856] WARNING: possible circular locking dependency detected
[  273.119742] 6.13.0-next-20250122 #1 Not tainted
[  273.120411] ------------------------------------------------------
[  273.124792] kworker/u8:1/65 is trying to acquire lock:
[  273.128349] ffffffff8621ece8 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x1612/0x1c80
[  273.130594] 
[  273.130594] but task is already holding lock:
[  273.131856] ffff88802f138768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  273.134017] 
[  273.134017] which lock already depends on the new lock.
[  273.134017] 
[  273.135731] 
[  273.135731] the existing dependency chain (in reverse order) is:
[  273.137310] 
[  273.137310] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  273.138779]        __mutex_lock+0x13d/0xb50
[  273.139822]        wiphy_register+0x1b2e/0x25d0
[  273.140916]        ieee80211_register_hw+0x23a4/0x3d60
[  273.142121]        mac80211_hwsim_new_radio+0x2759/0x4d60
[  273.143387]        init_mac80211_hwsim+0x389/0x870
[  273.144582]        do_one_initcall+0xf9/0x640
[  273.145661]        kernel_init_freeable+0x53d/0x7a0
[  273.146836]        kernel_init+0x1e/0x2d0
[  273.147792]        ret_from_fork+0x48/0x80
[  273.148760]        ret_from_fork_asm+0x1a/0x30
[  273.149853] 
[  273.149853] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  273.151225]        __lock_acquire+0x29fd/0x4580
[  273.152333]        lock_acquire+0x19b/0x520
[  273.153337]        __mutex_lock+0x13d/0xb50
[  273.154371]        unregister_netdevice_many_notify+0x1612/0x1c80
[  273.155773]        unregister_netdevice_queue+0x224/0x2e0
[  273.157033]        _cfg80211_unregister_wdev+0x57b/0x700
[  273.158301]        ieee80211_remove_interfaces+0x2f2/0x6b0
[  273.159554]        ieee80211_unregister_hw+0x55/0x3a0
[  273.160742]        hwsim_exit_net+0x3a0/0x730
[  273.161787]        ops_exit_list+0xb3/0x180
[  273.162792]        cleanup_net+0x546/0xad0
[  273.163796]        process_one_work+0x8ee/0x1a10
[  273.164933]        worker_thread+0x674/0xe70
[  273.166002]        kthread+0x3ab/0x720
[  273.166951]        ret_from_fork+0x48/0x80
[  273.167933]        ret_from_fork_asm+0x1a/0x30
[  273.169038] 
[  273.169038] other info that might help us debug this:
[  273.169038] 
[  273.170733]  Possible unsafe locking scenario:
[  273.170733] 
[  273.172029]        CPU0                    CPU1
[  273.173044]        ----                    ----
[  273.174063]   lock(&rdev->wiphy.mtx);
[  273.174972]                                lock(rtnl_mutex);
[  273.176297]                                lock(&rdev->wiphy.mtx);
[  273.177698]   lock(rtnl_mutex);
[  273.178521] 
[  273.178521]  *** DEADLOCK ***
[  273.178521] 
[  273.179815] 4 locks held by kworker/u8:1/65:
[  273.180808]  #0: ffff888008fdb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b6/0x1a10
[  273.183114]  #1: ffff88800ec27d30 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x861/0x1a10
[  273.185055]  #2: ffffffff86212d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xad0
[  273.186451]  #3: ffff88802f138768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0xf2/0x6b0
[  273.187976] 
[  273.187976] stack backtrace:
[  273.188412] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:1 Not tainted 6.13.0-next-20250122 #1
[  273.189181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  273.189958] Workqueue: netns cleanup_net
[  273.190380] Call Trace:
[  273.190637]  <TASK>
[  273.190866]  dump_stack_lvl+0xca/0x120
[  273.191294]  print_circular_bug+0x47b/0x750
[  273.191741]  check_noncircular+0x2e9/0x3c0
[  273.192170]  ? lock_repin_lock+0x207/0x320
[  273.192618]  ? __pfx_check_noncircular+0x10/0x10
[  273.193095]  ? hlock_class+0x4e/0x130
[  273.193479]  ? mark_lock+0xac/0xed0
[  273.193855]  ? __pfx_lock_repin_lock+0x10/0x10
[  273.194334]  ? timerqueue_del+0x83/0x150
[  273.194752]  ? lockdep_lock+0xba/0x1b0
[  273.195169]  ? __pfx_lockdep_lock+0x10/0x10
[  273.195629]  __lock_acquire+0x29fd/0x4580
[  273.196063]  ? __pfx___lock_acquire+0x10/0x10
[  273.196516]  ? lock_release+0x20f/0x6f0
[  273.196923]  ? __pfx_lock_release+0x10/0x10
[  273.197365]  lock_acquire+0x19b/0x520
[  273.197757]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  273.198343]  ? __pfx_lock_acquire+0x10/0x10
[  273.198780]  ? srso_return_thunk+0x5/0x5f
[  273.199217]  ? lock_release+0x20f/0x6f0
[  273.199631]  ? srso_return_thunk+0x5/0x5f
[  273.200068]  ? lock_is_held_type+0x9e/0x120
[  273.200522]  ? srso_return_thunk+0x5/0x5f
[  273.200972]  __mutex_lock+0x13d/0xb50
[  273.201376]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  273.201956]  ? unregister_netdevice_many_notify+0x1612/0x1c80
[  273.202537]  ? srso_return_thunk+0x5/0x5f
[  273.202978]  ? synchronize_rcu_expedited+0x38a/0x420
[  273.203492]  ? __pfx___mutex_lock+0x10/0x10
[  273.203950]  ? __pfx_autoremove_wake_function+0x10/0x10
[  273.204490]  ? srso_return_thunk+0x5/0x5f
[  273.204931]  ? kasan_quarantine_put+0x84/0x1e0
[  273.205416]  ? __pfx_wait_rcu_exp_gp+0x10/0x10
[  273.205866]  ? srso_return_thunk+0x5/0x5f
[  273.206308]  unregister_netdevice_many_notify+0x1612/0x1c80
[  273.206872]  ? __virt_addr_valid+0x2e8/0x5d0
[  273.207336]  ? __pfx_lock_release+0x10/0x10
[  273.207781]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  273.208379]  ? find_held_lock+0x2c/0x110
[  273.208813]  ? srso_return_thunk+0x5/0x5f
[  273.209253]  ? kernfs_remove_by_name_ns+0xc7/0x130
[  273.209767]  ? srso_return_thunk+0x5/0x5f
[  273.210215]  ? lock_release+0x20f/0x6f0
[  273.210624]  ? __pfx_lock_release+0x10/0x10
[  273.211062]  ? srso_return_thunk+0x5/0x5f
[  273.211503]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  273.212036]  ? srso_return_thunk+0x5/0x5f
[  273.212478]  unregister_netdevice_queue+0x224/0x2e0
[  273.212982]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  273.213525]  ? up_write+0x195/0x520
[  273.213913]  _cfg80211_unregister_wdev+0x57b/0x700
[  273.214416]  ? srso_return_thunk+0x5/0x5f
[  273.214854]  ieee80211_remove_interfaces+0x2f2/0x6b0
[  273.215356]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  273.215912]  ? srso_return_thunk+0x5/0x5f
[  273.216354]  ? srso_return_thunk+0x5/0x5f
[  273.216795]  ? synchronize_rcu+0x1ff/0x260
[  273.217228]  ieee80211_unregister_hw+0x55/0x3a0
[  273.217704]  hwsim_exit_net+0x3a0/0x730
[  273.218113]  ? __pfx_hwsim_exit_net+0x10/0x10
[  273.218571]  ? srso_return_thunk+0x5/0x5f
[  273.219010]  ? netdev_run_todo+0x788/0x1040
[  273.219457]  ? __pfx_hwsim_exit_net+0x10/0x10
[  273.219923]  ops_exit_list+0xb3/0x180
[  273.220315]  cleanup_net+0x546/0xad0
[  273.220706]  ? __pfx_cleanup_net+0x10/0x10
[  273.221152]  process_one_work+0x8ee/0x1a10
[  273.221611]  ? __pfx_lock_acquire+0x10/0x10
[  273.222053]  ? __pfx_process_one_work+0x10/0x10
[  273.222539]  ? srso_return_thunk+0x5/0x5f
[  273.222978]  ? move_linked_works+0x172/0x270
[  273.223425]  ? srso_return_thunk+0x5/0x5f
[  273.223873]  ? assign_work+0x196/0x240
[  273.224289]  worker_thread+0x674/0xe70
[  273.224703]  ? lockdep_hardirqs_on_prepare+0x262/0x3f0
[  273.225233]  ? srso_return_thunk+0x5/0x5f
[  273.225674]  ? __pfx_worker_thread+0x10/0x10
[  273.226140]  kthread+0x3ab/0x720
[  273.226503]  ? __pfx_kthread+0x10/0x10
[  273.226912]  ? srso_return_thunk+0x5/0x5f
[  273.227354]  ? finish_task_switch.isra.0+0x206/0x840
[  273.227875]  ? __pfx_kthread+0x10/0x10
[  273.228291]  ret_from_fork+0x48/0x80
[  273.228671]  ? __pfx_kthread+0x10/0x10
[  273.229081]  ret_from_fork_asm+0x1a/0x30
[  273.229522]  </TASK>
[  274.594872] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  274.598470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  274.600580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  274.607421] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  274.610665] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  274.612991] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  274.783129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  274.788603] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  274.791855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  274.799640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  274.802781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  274.805021] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.911203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  274.912965] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  274.916951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  274.920404] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  274.924216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  274.926223] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  275.070319] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  275.079637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  275.082979] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  275.099046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  275.116327] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  275.134294] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  275.140208] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  275.141487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  275.146217] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  275.150876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  275.153324] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  275.155190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  275.162859] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  275.169028] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  275.175017] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  275.175592] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  275.188861] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  275.194004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  275.252176] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  275.252340] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  275.255665] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  275.261355] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  275.261956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  275.274820] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  275.277175] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  275.277424] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  275.280636] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  275.312988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  275.314196] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  275.314732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  276.693289] Bluetooth: hci0: command tx timeout
[  276.821634] Bluetooth: hci1: command tx timeout
[  276.947751] Bluetooth: hci2: command tx timeout
[  277.203792] Bluetooth: hci4: command tx timeout
[  277.267866] Bluetooth: hci3: command tx timeout
[  277.331837] Bluetooth: hci6: command tx timeout
[  277.395783] Bluetooth: hci5: command tx timeout
[  277.395860] Bluetooth: hci7: command tx timeout
[  278.739821] Bluetooth: hci0: command tx timeout
[  278.868759] Bluetooth: hci1: command tx timeout
[  278.995862] Bluetooth: hci2: command tx timeout
[  279.251760] Bluetooth: hci4: command tx timeout
[  279.315886] Bluetooth: hci3: command tx timeout
[  279.379999] Bluetooth: hci6: command tx timeout
[  279.444865] Bluetooth: hci7: command tx timeout
[  279.445100] Bluetooth: hci5: command tx timeout
[  280.787830] Bluetooth: hci0: command tx timeout
[  280.916495] Bluetooth: hci1: command tx timeout
[  281.043836] Bluetooth: hci2: command tx timeout
[  281.299905] Bluetooth: hci4: command tx timeout
[  281.363754] Bluetooth: hci3: command tx timeout
[  281.427800] Bluetooth: hci6: command tx timeout
[  281.491854] Bluetooth: hci7: command tx timeout
[  281.491961] Bluetooth: hci5: command tx timeout
[  282.835819] Bluetooth: hci0: command tx timeout
[  282.963832] Bluetooth: hci1: command tx timeout
[  283.091923] Bluetooth: hci2: command tx timeout

VM DIAGNOSIS:
05:36:07  Registers:
info registers vcpu 0
RAX=ffff88806ce00000 RBX=0000000000000000 RCX=ffffffff84a8e9d7 RDX=ffffed100d9c6c4b
RSI=0000000000000004 RDI=ffffffff814b1bba RBP=dffffc0000000000 RSP=ffffffff85a07e10
R8 =0000000000000000 R9 =ffffed100d9c6c4a R10=ffff88806ce36253 R11=0000000000000001
R12=ffffffff864057d0 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84a8f97e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055656619d149 CR3=000000001b9c4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=0000000300000002000055d7aa32f430
XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=000055d7aa32f430000055d7aa3273d0
XMM06=000055d7aa3273f0ffffffff00000002 XMM07=00000000000000000000000000000000
XMM08=00000000000000310000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=ffffffff8283e7d0 RDI=ffffffff886990a0 RBP=ffffffff88699060 RSP=ffff88800ec26bc0
R8 =0000000000000001 R9 =ffffed1001d84d67 R10=0000000000000001 R11=2f72656b726f776b
R12=ffffffff886990b0 R13=ffff88800ec26eb8 R14=ffffffff88699320 R15=0000000000000000
RIP=ffffffff8283e825 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d7aa31f000 CR3=0000000015bb4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=5f73666e2f74656e2f73666e2f73662f
XMM02=ffffffffffffffff00000000000000ff XMM03=696e656420737365636341002f737973
XMM04=0000000300000001000055d7aa331550 XMM05=000055d7aa3314b0000055d7aa331510
XMM06=00000000000000000000000400000000 XMM07=00000000000000000000000000000000
XMM08=2f74656e2f73666e2f73662f7379732f XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000