Warning: Permanently added '[localhost]:46375' (ECDSA) to the list of known hosts. 2025/11/15 07:34:00 fuzzer started 2025/11/15 07:34:00 dialing manager at localhost:37161 syzkaller login: [ 52.429844] cgroup: Unknown subsys name 'net' [ 52.494452] cgroup: Unknown subsys name 'cpuset' [ 52.509763] cgroup: Unknown subsys name 'rlimit' 2025/11/15 07:34:11 syscalls: 202 2025/11/15 07:34:11 code coverage: enabled 2025/11/15 07:34:11 comparison tracing: enabled 2025/11/15 07:34:11 extra coverage: enabled 2025/11/15 07:34:11 setuid sandbox: enabled 2025/11/15 07:34:11 namespace sandbox: enabled 2025/11/15 07:34:11 Android sandbox: enabled 2025/11/15 07:34:11 fault injection: enabled 2025/11/15 07:34:11 leak checking: enabled 2025/11/15 07:34:11 net packet injection: enabled 2025/11/15 07:34:11 net device setup: enabled 2025/11/15 07:34:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/11/15 07:34:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/11/15 07:34:11 USB emulation: enabled 2025/11/15 07:34:11 hci packet injection: enabled 2025/11/15 07:34:11 wifi device emulation: enabled 2025/11/15 07:34:11 802.15.4 emulation: enabled 2025/11/15 07:34:11 fetching corpus: 0, signal 0/0 (executing program) 2025/11/15 07:34:12 starting 8 fuzzer processes 07:34:12 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x3631a09df156e78b) r1 = syz_io_uring_setup(0x55ca, &(0x7f0000000100)={0x0, 0x803, 0x2, 0x3, 0x1ac, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000200)=0x4, 0x0, 0x4) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@newsa={0x1d4, 0x10, 0x800, 0x70bd25, 0x25dfdbff, {{@in6=@private2, @in6=@loopback, 0x4e20, 0x6, 0x4e22, 0x7, 0xa, 0xa0, 0x80, 0x3c, 0x0, 0xee01}, {@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4d6, 0x2b}, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, {0x4, 0xa2ad, 0x8, 0x9, 0x1, 0x9, 0x0, 0x1f}, {0x3, 0x47a, 0x100000001, 0xfffffffffffffffe}, {0x6, 0xfffff2d7, 0x27b}, 0x70bd28, 0x34ff, 0x2, 0x0, 0x7, 0x1}, [@algo_aead={0x99, 0x12, {{'aegis256-generic\x00'}, 0x268, 0x200, "5cf61c8794381df1aad449f58efbeb044b1519c37e13128fa5292bd9666490dd065eda5138229d525ca2e1d783a0233d441dee5f9b393e99232be3119c188580e52324a10d10bca9981ddfc1b5"}}, @algo_crypt={0x48, 0x2, {{'chacha20-generic\x00'}}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x800}, 0x48080) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000500), 0x0, 0x4) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x13, r0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000540)=@IORING_OP_NOP={0x0, 0x5}, 0x1) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, 0x0, 0x600, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c014}, 0x20000010) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000003, 0x110, r0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000007c0), 0x0, 0x4) modify_ldt$read(0x0, &(0x7f0000000800)=""/133, 0x85) syz_io_uring_setup(0x4b9d, &(0x7f00000008c0)={0x0, 0xf343, 0x10, 0x3, 0x3be}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000940), &(0x7f0000000980)=0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000a80)=@IORING_OP_WRITE={0x17, 0x2, 0x2000, @fd_index=0x5, 0x10001, &(0x7f00000009c0)="4ef20649acbb01446a5cb34fd7ce02728279da65de39dce6b0a11f3f3edda4eb60dd972fe4fbefe11381cd7f3fe1c711d480fb69ece2df3e158ba217d14c201e98ae04ec4907e3125b93ddd2b229bcf310e592e54b14640a50aff687a4d1eb2587be240dc0ec5e488761e2a6bf863f9dceba0ebc97690dc9792d77fb80ad550a5549b3d977f6737b67c891be56f0c99c4b20907b7e2ddaf7d0269e76ee8abd229d143545573a41047141a7125a989e946a1ea569f68ea4a7", 0xb8, 0x2, 0x1}, 0x7f) syz_io_uring_setup(0x2782, &(0x7f0000000ac0)={0x0, 0x1753, 0x8, 0x2, 0x20d, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000b40), &(0x7f0000000b80)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x13, r1, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000bc0)=0x1, 0x0, 0x4) modify_ldt$read_default(0x2, &(0x7f0000000c00), 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) 07:34:12 executing program 7: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000040)={r0, r1+10000000}, 0x1, 0x1, 0x1}, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0x34, 0x5428, 0x10, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7800, 0x20, 0x4, 0x741b}}) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd, 0x200000000, 0x0, 0x3, 0x5, 0x1}, 0x7) syz_io_uring_submit(r2, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)={0x200040, 0x41, 0x8}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8001) ptrace$getregset(0x4204, 0xffffffffffffffff, 0x205, &(0x7f00000002c0)={&(0x7f0000000280)=""/5, 0x5}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x402000) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000340)={{0x0, 0x7, 0x4, 0x4, 0x1, 0x5, 0x6, 0x3, 0x81, 0x7, 0x1a2c, 0x62e9, 0x3, 0x5, 0x2c6af562}}) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wlan1\x00'}) r4 = syz_io_uring_setup(0x713b, &(0x7f0000001380)={0x0, 0x2ed, 0x4, 0x0, 0x316}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000001400)=0x0, &(0x7f0000001440)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x104, &(0x7f0000001480), 0x0, 0x4) r6 = accept(0xffffffffffffffff, &(0x7f00000014c0)=@pptp={0x18, 0x2, {0x0, @local}}, &(0x7f0000001540)=0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000001580)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000001780)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000001800)) syz_genetlink_get_family_id$tipc(&(0x7f0000001880), r6) socket(0x10, 0x5, 0x7) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000018c0)={0x3, 0x2, 0x7, 0x2, 0x1}) 07:34:12 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sysinfo(&(0x7f0000000080)=""/139) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@version_L}], [{@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, ']{\xb4!:T.'}}, {@euid_gt}, {@hash}, {@dont_measure}]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x144, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}]}, @NL80211_ATTR_CQM={0x68, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x100}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x61}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x9, 0x380000, 0x9, 0x6, 0x20, 0x0, 0x777, 0x800]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x43a23028}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3ce}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1c00000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x9, 0x400, 0x9, 0x401, 0xa48, 0x8, 0x3ff, 0x650, 0x100]}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x100}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x329}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x93}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1bc}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4004004}, 0x2804c0c1) sysinfo(&(0x7f0000000680)=""/243) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x2f, 0x5, 0x1, 0x2, 0x15, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7800, 0x80, 0x40, 0x1}}) r5 = socket(0x0, 0x5, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000008c0)={'ip6_vti0\x00', &(0x7f0000000840)={'syztnl0\x00', 0x0, 0x2b, 0x1, 0xe0, 0x1ff6, 0x40, @local, @remote, 0x80, 0x20, 0x8, 0xc6}}) 07:34:12 executing program 2: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x4890) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x14044}, 0x20000040) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x301, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x25cb263e6d6e8b67}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x7bf25b6b268f22d9}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x41efee27f516fb48, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4008004) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xd00028}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x78, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'hsr0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x48040}, 0x4000000) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), r0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}}, 0x4040000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r2, 0x5546b28929b08d51, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x48, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\xd0\x00'}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ']@\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4004081) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x80) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r2, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}}, 0x40840) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r2, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000005}, 0xc000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0xd89051b1029ccdef) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0xe0, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x53}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 07:34:12 executing program 3: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000015c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000001580)={&(0x7f0000000100)=@ethernet={0x306}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="faf8ea036f2f382714cee6c688f114882d4735fee5a63c5f13477966a7990056c003a1f0c33ff719bcb7631f14873dc13bdb5440155b2f66f4d0ec8077f06448a644b62b2719ad5eb606ac32aab75e5d3ea9cb5067730abd07840f8a090211e5cea1b8535f88096a82e31540faa59872f28fdbfa97b1413868ff66341129c5d2d6c2f1f918bd461d660431c589704bf909f43903602bd50f2e7b5b848b382bf1997df756663f1c15c4e57e5b6fdd5d0ab241d8a1521ee759c9b225c08f3b", 0xbe}, {&(0x7f0000000240)="e695b75cc4ceed0172178af4720ac22215872f0f2a23e445db78d80001ccf902e07fbad377cc27bdf8c3d351c7e715375a6ce26aeb46c11164f04330818614f012494521129b6636d2d8887a66", 0x4d}, {&(0x7f00000002c0)="eb6e65908b9de73fbfe3b92fa63f102d2801b04dc6d7f8504a8f302783cdf7bd50755da6e32e6f01acf91a274fb2c7769c29aa05918be43deaee90f012be6c83b2f45a168018386199c103887d840c2fd18e7886929ffa2cee4139b3b2d52d1d401f080387f7947d34ff6132d9458e90", 0x70}], 0x3, &(0x7f0000000380)=[{0x1010, 0x10e, 0x0, "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"}, {0xf0, 0x10e, 0x94, "d8775b3d8a726102282ca9d9ad1715e88df9df9fe52e757cd0b819c89bac9c54d331176da2d56f08e0d1a72c38a984fd293d2940d8313617410265cfbcbf3a909fbfcbb4db2d773052534ce5e3af652c88aea0be93d9294c4b2204bd03e6b4cf163bfa12522d0bfdf2248e5268f26c2ec8118cb28b785bdaef18a31019493264fa1d1ff7ce43c7cc2c2391188046eece2f5008daeada50be8ad714ef26b65a720c675b7010543153cf37ebf0d12f4148a8968c6f8616f15bc2e9df667fa9bc91910931a397736d3ac3c5d2be8840845415c3c25da1882fed2e"}, {0x100, 0x119, 0x3, "dc0e7dd60cfa636ab3e08d1005c091a951d8decafad9a858be79c5e1ae129dce65befb4f42ae99b58d950d1538febf2f7bc8dba0fc528f2c2ccf5ecbd94a337ae2d4b8c74eb9d6efa2fec9f9e8c93c6e6d1ad41a7940bd2f96c85278e1477cff8c64106099f60ac334f699e5ed8d14fae8e1be9baf8560b18473ec8a7895f94a80be8d6785491bbc472a8d95451b47f716d362933e096aa6270292337ba80c6cb1e91a2db21b2c5538bff1a1d3ac6b4917908aac4163f4b1bc349b181e22e93c6c8c874cdd602dfcfe5812bca4042233e314977f61c6bd75b0e14338d8a6682cac4e332ddc60a36e0ccdb9"}], 0x1200}, 0x0, 0x24000040, 0xf1273013f397fd7d}, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000001600)) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001640), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001680), 0x103580, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r4, 0x330f, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) r5 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000001b40)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001700)=@newpolicy={0x3d8, 0x13, 0x800, 0x70bd2a, 0x25dfdbfe, {{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4e22, 0x0, 0x4e21, 0x800, 0xa, 0xa0, 0x160, 0x3a, 0x0, r5}, {0xfffffffffffffff8, 0xffff, 0x1, 0x7fffffff, 0x9, 0x1, 0x0, 0x4}, {0x4, 0x465a, 0x3ff, 0x6}, 0x8000, 0x6e6bb0, 0x1, 0x0, 0x2, 0x2}, [@algo_auth_trunc={0xdc, 0x14, {{'cmac-aes-neon\x00'}, 0x480, 0xa0, "765b249ba4957b16adba323b4daa9299723a00ddbc1015ec85bedc4a98977646b6410370f6c5a434179f8494a26336544cff74e8b1211b7ef4f1d3b69a0b1bcf8ffb64eedbafcff0665f953ea8717e93631a60fb3e1353085b09bc66621f4ceb576ce87781c30e2d05e221edb0aba5e6a1cf6e06bdab3140465f304968d7d9b95db05542ba287878b5f2abdde60e548e"}}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd27, 0x70bd25, 0x70bd2b, 0x70bd2a, 0x3, [0x7, 0xe06f, 0x3, 0x10000, 0x4, 0x7fffffff, 0x8, 0x8, 0x3457]}}, @tfcpad={0x8, 0x16, 0xd53}, @replay_val={0x10, 0xa, {0x70bd25, 0x70bd2c, 0x2}}, @algo_comp={0xde, 0x3, {{'deflate\x00'}, 0x4b0, "1c17fcd0969019891bd4a5079ab18f4c2ebe3c2aebb9a65306024f3755d1da0872d5563526ae186e841de70d8e1f62c022cb0f8dff2b8df989c750539ab1392ef9dedf80bd6536a4209e01e31d582a0d8086170c12ea42be0fbbe9c63202915cbcf97e71f156b3b74c26cd23897ec4925ba6cc7dc086b678e2e0a94e1b4b29c669021621fc4a5679f5014301de621e9c4bf6a613ba43"}}, @algo_auth_trunc={0x4c, 0x14, {{'nhpoly1305-neon\x00'}, 0x0, 0x80}}, @algo_auth={0xb6, 0x1, {{'vmac(tnepres)\x00'}, 0x370, "e2ca31d070014b52186f4e730a4c98ff3382eb599ac62503c012a9455d356dfb37674172bf45b1902ebe14f0572f240ef0c6aa1d6d9b31f150a6014a4a41465591ae8860dd2ae31c3489dcb188cd77c94279a10aa5ded0a09a77eb32f219d98b53e7063046537d913b9a232b503e"}}, @etimer_thresh={0x8, 0xc, 0xf6}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x20008141}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = accept(r6, 0x0, &(0x7f0000001b80)) syz_genetlink_get_family_id$fou(&(0x7f0000001bc0), r1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r1) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x28, r8, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x850) 07:34:12 executing program 4: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000000)=""/4096) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000001000)={{0xffffffffffffffff, 0x3, 0x401, 0x1, 0x1000}, 0x4, 0x3}) msgctl$MSG_INFO(0xffffffffffffffff, 0xc, &(0x7f0000001080)=""/63) msgrcv(0x0, &(0x7f00000010c0)={0x0, ""/26}, 0x22, 0x3, 0x1800) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001100)=""/42) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001140), 0x400200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001180)={{0x3, 0x0, 0x80000000, 0x3, 0x5}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000011c0)) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x5c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x5c}}, 0x2000c085) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001380)={{0xffffffffffffffff, 0x3, 0x5, 0x1, 0x1}}) msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f00000013c0)=""/35) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001400)) syslog(0x0, &(0x7f0000001440)=""/244, 0xf4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001540), 0x40440) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001580)=0x1) syslog(0x4, &(0x7f00000015c0)=""/148, 0x94) 07:34:12 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x120a030, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid={'afid', 0x3d, 0x1}}, {@cache_none}, {@cache_fscache}, {@version_L}, {@fscache}, {@loose}, {@msize={'msize', 0x3d, 0x9}}, {@privport}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x62, 0x31, 0x38, 0x39, 0x35, 0x61, 0x66], 0x2d, [0x36, 0x35, 0x37, 0x63], 0x2d, [0x62, 0x34, 0x39, 0x34], 0x2d, [0x32, 0x37, 0x36, 0x31], 0x2d, [0x37, 0x36, 0x63, 0x64, 0x65, 0x62, 0x30, 0x34]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\'{'}}, {@obj_role={'obj_role', 0x3d, '*'}}, {@permit_directio}]}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x6c}}, 0x841) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000340)) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x20c002, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f00000003c0)) bind$802154_raw(r1, &(0x7f0000000440)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4d004) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000580)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f00000015c0)={&(0x7f00000005c0)="4fa071f9cb6f769065322fb49ed2f1150668b133370503f97cb3daa3d91814f96c07b2309f426093160b3263c8c371a58544688af94a44f147d6f27c8d6655fc1eaf5906b5347fe4e5f219ee370f28bf142d69b793c0216ba430114d965965250b1e435a739390c08937d963c5febd133ea78b5ad00516fd29deb8a69bbfc3408cafaf5cdf6b5f76426ec8189c81f24b3af7987a005327528b625fd3f098d33339987a17123fe1a205932b32688f8943b0d1445e936cffe750882ce23a98be2a9a2b3211e5b23a75259d7e0d68cce8f445430b52977a03ecc53c6fff9bcf04171d379897983f5b2d9300228a4f195a2e4a14f85ca94205255ba3d0e1a28c3da1b75d7280445fa0e8102828a5deb48dbc0a613f04abf79f34c305d76d152cc6c6cf716ba1f438e0dc13148ced69a57ba11aa8d2bb1bd0f78468da9c587336fb31b80f8fc34e441c18c925fd1fc1fc7c0b80d38c0dbb963ccc9427b9523b020f344ed9db425fa3745b5db2ff226ec9a3ea2192b0534497d3a1e0ad801c79cd732083b4f40f15595b07de6186327d6f30f065cb626cfd19cee225d5c3aa645b801ea830be0882e7a2f27757f2546b521da400e0fdd867d54eda0bf0ed8baadf813f2459458f72095c8f662b7ce499b54f9a260b411a00f2ee34aa2dbd5e4f096c565857872eae2f3425bb00f073396e81d758f725366312d7a6ae008ba224604efe3a324c13b1bb1e0f97f69bf7514199a16be798df46c3b0946680279531352518b5e55a17550e2074b965d3e1e288bdbc5732248635720782784b5abe0c2258783cf4270bb345f5fda8f85736e5d609ffbff75e6963267faba33a687634c54accabf2cd577d3226a2fec4db57242c17169d000d1347639cf00e3756d83a83c310f2d3c24f96a52be9ad121149e0eb73f864eb3fed5a5a4ba2ded0de1398d26b4f9fbed117a17dfeb4d53ec3fab98c1b954c11e752c9a353462288a488aed07728c3433b706bf895d711e454b38a68f3c0e7b0b415958907856e1ed217a35df6dc4ad56721855f6831a3724659e04154a74df1d28882d681c0871bd4e10c0da1bb70d30e387644b5dc3ada33f331aea3ffcf7e91e080b0a26f97c4d8d68f106c34cd9ef87d918039d631e58e8f6119296a5bc038f29159fbe6b029646eb1e6a0dbf3f0cabcc5919f9a839bd6aad76750a38d3550d04db96b51a079dafac32277c15c3178a3c8030e8fd3cbdf472bc282552debf6784e1c66eaa8d631f183ebf2e78708a1014c283faf059a25bf7db624ddb8c48fde208d2993c4496a847fdb1c2b08f4ae8d32777214c7dbf09f0f15ddec222bcc8caddd4992db8e90fefdc9c16a6f285446f53dfeb0f921ab125251bb98ba73977f083e9976859101cd80fd887675dbbfc96ff090e6e7f4514f87d44d5ba7ac42653b54428d06661daab56160fcd80cf9547025c9f9177a6f3f3329b1a19c6dab760dc41ec0cc2766ded2b3eec758150e03eadc3f089a14a8728bdeaa923f0eb8f96f80b5e304ef44dd98ce7082c1e3efe721c67eb6e6a19d9edd33bef8d319262dcf9c384e9b0e3dfa0a26658bd5da49018c6cc803473c702c3c5dc3e3a8f411be6679977510fb61117c50da383a88024c876e90204f7bb8147a41a74a19ab8fd77453aab8fb605931e1d62f61d2e0d04323168ad28b1c80505b89dadb23665e12b4b122164f305124655ae189deef8349bed4804857b7e6b52b15e05e6a7c3b9caa922e0ce850fae5951661ad6c7dc32d253328478996dae1b8f3f6ed62b4c91a24ba926eb6c507ea21f223ed1a78c4e3e2390817ccc961d737d0f6ac0ebf5ec2f7c36ceb81bb031e10ab5275e5d7de166ea39b30a521dbf046c673d5770c2aa38df161ad276d2b4bcf81bbf568a7303e59d8b158564a49251eed76be73946b72bda38605d1ba82a9ac7eee2ecbe2519c7284797229cf026ea8ad25350a66bac9b22edb60c72012003ca8919081a172a33fa04fc95b9e8ac32ba6ba36f8737a94a582544149b4ea69fa1a1d9a3ae468546913ee2e53d10b30983279bc9622b11dfd8e682b4b66164472d34a370d9b0a2715c341f6e22e777de6e8af0e74d568d16624be281f88a86aa01dfc67670c7e88c4e94134a70e10789cbaf31a72fc5ce4ba4ec6ed91f41a5abdd51ffee11042fb9197cf5a49a76517ffffde4618e70472c12ccce4a55cc85fa0f93a66d4620654fff674660d2dce556fcb440de97c57e754081921c2a7ee5beece3ce8b137d69a931dd849a179bcb3201ddd62a2aa0d6b929b65b8bf73f5fe867fea4eca6ce8db97869c9e8041fab6d25d208a9b77585f619145459a90aed42297757e4a186aa4a5f13776746f929ddfe73bd19f3a9be223f48453b89f7c23929c287c19e85b9c5b24393be2e653c89cb913f1b3611137f1a1628a3d90cb1656febe4e97e0243d8ac691af68bc9252a135b6f32b1e5970a0ad3951f14440f4cdc120ea967721f040f7440da4d79c23ac48681613f6e3f2dc6fa23d940040f24ecb1bc6fa423f7ffa45205209114476e497b042653f22f6adb4ad1e8a9bcbcb72e188bd369b31c3464175239b8b12f4748058a5e310feb0e62d025cb60813646bd079b08baca97c1a7d4fa2b79c89a74fe5bc9f9d7b51fa55268c8f0fa963dea5440af7da668eefa49bb23182214a2dcf7d2bf80e292fe09f04721e5a835f0a6124d205627a8dc702fcc1ea667581f49b956ded8b75bbf796079e5fe3a0bb621f9adca379d078f4bad54dda9e01c49b10095a9b10855a1840e22a0af6658fff478be7dfd305fe84bc6a138b5a3fff74c37c34c8b551a9d66c662658d07abdcffb33c638959ec19911f07794f07c086c9a87f7195e110cc77295388ec28f40973ec9e2a3fa7b4b4c06cb9df50ea031d824c888b2e9ab603c0e62706cb92056b6492fcebede6f6638baefaa8f4d0118b2b421effc939e6d97e8046994ac44f5b31271e8bfb16198c39a2861aa6ac680af1e5febebace79163cbe16ae096d2f7467c6ee39dafdf77e3912580d63675c063dd848a22dedfd84f1c717f578e4b80eb2609e3005b147d2ed7136a804c28d8cfd6a632bc82b961e2cf1c1d839255d16fc3d87e1f2461104f156e5140d8a053db7ffcfc7e4e863b0b8f1f8e0c4e94004b1afb582408f961f29fdd80aa4cf11b625d671583562b645f1501b0ad1b0814220c39fa7ee01ff54fc8a4dd9bc863189cb6360466723080e58d95442f346c9f9a08c3041002b9ae67ebabd11b751557dd5051ba96040cb33cee6855da86dab688d7e3171f920de9ea03a012d8294b73f8ec0022fadc37e007e6f3419cd48df5e573d50c8674b58eae8f2c120d6b4967a2fb7a87fbb6955475323c65f6aaaab8ce7b3925e52eec668ca9eb3474f2da48dcde2db149ddd2d625983f430a71024033446542c0be0fa31e9091941be3a13ff56c7eafc6105ac5645cd97020885f8c44a04f56bd692b357b5f1fbfd5201bfd20547f771b9a765c6675a1fd60e93b7ef91f89f4d7e5dd76e0a74151102d99c1cfc845f4664d37da00f612fcda2dacfb7d87306d77fde4f3675cd6ec16229cfcafb7792685f49c168c576603c13c83c6373693d97d36eb243abada70e331f907b0a3625e15965cd2ee4916b6c88005149e6838318e9b03906fa601f4af1a864f7a040babcc703ce455512af9e353e61b6e2bb338b8999ed0f1f85d873218dcf9906d6bef6a98807c0144c7bbd49cace0a56bdd1d827702e25a40cf327497dc83dd9603ec0e918e2975ef1958ed944891910badeb8fb9440b901442cf900b8ab4f5543462d55f2ca78b23f925405fd9545166543e6028a91d5f8dbe84dbe7080eaaa48b3b03a4fa8f015dca0056a718627a8f381d27fb125aee8bf67733d5aa9f5b7eaaacd3b7bd2c92512799df5bae84e7d9ab454f7acb66b11360934802067bd123b9ecef315ec6c3837a5a7e6cf40cc08736984be705eb2cfaa8a7db61905f45343312280372f7b45a48e7be77314421abfc86670ef74e72cbc9c003b99b6772067ebb88b9ff62a57156af10b72ea85bb3fe8a8cec668bacf92ec5c1476b82d2a42f19abe819835e873c8dbc9eb8760253727cf12346e768ad15e330eaf38931f72674228f2b3fd0c395aab94e4d645bc0ae237e1c7a792c1502f2823907417d912ea8c8c79a4bf18355dfa31e017028ca61bbd68aeedb36b83507918ac77b50cbee50f5f57c1e509cf2b42e86a0d789e4ca7069ef0b8738ed913ef230eff440a74182fafad137f22ece00e93516dde3c1c06b6be25adcbd23e6427d819aa3f166887256aa4030c38b83811ba78f4b1b217a77551b67da26e2424f7a9a6914613fff5233c2446b61cdf8089017df897ece280bf70579529ef6ab59155838010c679f62d49ee9f74484c8a3eeafb519efa273f6b86cad66bf7c5d6dd2adb4de60d5d9847f2803f2e213fcef02450da3b9657eac50970d533e39f71fbfb5a6691a64b287124ef535307f63de6335ff92f26929b40f251f9be6d1b845c4409ec769676c7a94bb01cfca560ee6466854756c30cae64166988b434e0b87f87f1892de94b9cb535607ef1ffe730aa33d6a6ce72ee971c8f8d7d75e1fce674b0a097d6e8dd1d902f719807652457fd23bc281ffed93d03b3e05614b35fd5f0c74ea0b31182496ca978ae6ffb64927a256d5eb0946a5e89affc89fbd810f5e6924b63aefa75c7d1b4faa6838f0e398f693fce3a49a5d264d451c33f658452bde3ab63b07297bfcc3b5320ca4c5908bb4c3dc20dab8adefdd9f059a0aa51810a6f42b873ca88e6327173370e939d6dcdac6b97466966d246c84142fed8bbad85092a452d8ed77a7b0c28ec1ae8721b696f0f9c81516eb1996099c6800fa3f6797ff9d71987024b16e0e88c50c3c80c8fdf3e8f97b68f1f866fa46aec9f81ccf2db1eb261a9c4a76cf5aeaf61380dbc726b0f61ae55010abef993e709c35e1a3f497c79c640ea20c00f337a89bf4ca87b5996f653e1cb050f67c7145957845c8b8da7d3f132e965c98d68af6e5a115a07d0ee413d692d3fa20b972c09e34bedab169d225b7f8969bde161d183bb0363ee409fb3f1eb917c56d26d6e355c92ed6c9e6873d8be61c57201e7c0f61c4582e61f41799fdc894e6de1d91ef308b080d0c4f66ce87622a039a1dd0c8268e2734b7363f47a8b620e37e8ff159532c88517744db1bb465e8a1e7b0ef76fce5944bef301c232101f96fac2a152cb759e0360ecff10630b479bfb87f00e1edc99e2d174d188c130c66dd1e1b7447416aaa5276b1d149cf54ec702069ed29c2c6e81e143a55a58c98499a0ddcae28300aa09a7ccd1a107e97d822f9e5cf6eef001344d9f329ba058dc2b132208f1d7953398fc75461d8ccaa96440bf74c3b9ca35f8b300c4fe96fdd14d7c33061ce45f1290d2095a0c2a7905e265127a892bf113e61181cd6ba54a0695e93b6ee7c380a178149ee876acdef9319bd86a64d359b4801118b67872b1fb658962580c8445e2365a34c0049b2215e5f7e690390a67ab2aa64e13a70142c4bc40263bd8d4935ec90586e702fee05343b3329f7294936c57fe474277fb5118b36e603e3e5ce42117285a56c244c9cfdbc24df37b9f147e495f9ebf0ccbedda4565fbd1a0b8705d9442243d45534a16f8ef4518c5e8018478519302638e03c7958f53598dab47c9e39b1b88d2d93043ff95c9b9d5cb051c0368b76962f2769b06e2b964dcf692e68aa447664c12a2a3e31bfbae59c5afa1c3782b04ddc40bea3fd3f", 0x1000}, 0x1, 0x0, 0x0, 0x1c841}, 0x8005) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001640)={0x3, 0x100}) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000001680)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, r5, 0x802, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f00000018c0)={0x0, @xdp={0x2c, 0x1, 0x0, 0x1f}, @hci={0x1f, 0x2, 0x2}, @sco={0x1f, @none}, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001880)='macvtap0\x00', 0x7, 0x6, 0x1}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000019c0)={'syztnl2\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x0, 0x8, 0x6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x7880, 0x1, 0xfffffffe, 0x6}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001b00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a00)={0xa8, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x16}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b40), 0x80101, 0x0) [ 63.214589] audit: type=1400 audit(1763192052.525:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:34:12 executing program 6: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = accept(r0, &(0x7f00000000c0)=@rc={0x1f, @none}, &(0x7f0000000140)=0x80) r2 = socket(0x2, 0x80000, 0x800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x6000, @fd=r2, 0x7, 0x0, 0x0, 0x9, 0x1, {0x3}}, 0x5) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x40, 0x3, 0x0, @local, @mcast1, 0x8000, 0x7f10, 0x6, 0x1aa63283}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x0, @xdp={0x2c, 0xa, r3, 0x1d}, @phonet={0x23, 0x7a, 0x1, 0xae}, @nfc={0x27, 0x1, 0x2, 0x2}, 0xfff, 0x0, 0x0, 0x0, 0x102, &(0x7f0000000440)='macvtap0\x00', 0xffffffff, 0x401, 0x2}) r4 = accept(0xffffffffffffffff, &(0x7f0000000500)=@qipcrtr, &(0x7f0000000580)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl1\x00', r3, 0x2f, 0x1f, 0x8, 0xfffffffb, 0x64, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x7, 0xa0000000, 0x40}}) getresuid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)=0x0) sendmsg$nl_xfrm(r4, &(0x7f0000001a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000840)=@migrate={0x1144, 0x21, 0x300, 0x70bd2c, 0x25dfdbfd, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 0x4e20, 0x2, 0xa, 0x0, 0x20, 0x2b, r3, 0xee00}, 0x0, 0x2}, [@policy={0xac, 0x7, {{@in=@broadcast, @in6=@remote, 0x4e21, 0x486, 0x4e20, 0x80, 0x2, 0x20, 0x0, 0x3c, r5, r6}, {0x538, 0x8001, 0x1, 0x83f4, 0x9, 0xfffffffffffffffc, 0x14ae, 0x3ca}, {0x7, 0x8000, 0x1f, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1}}, @algo_crypt={0x1048, 0x2, {{'cbc(aes-ce)\x00'}, 0x8000, "0fc6d723db1fbfac22a55ab1d2c140cedb660c722afcefdd6306ba038ab360e930f0ec562da9866ce1d20bc50df4e3909029f212c5d80a8bcf429c5f9ce0549d126f5b663b07a04a02344a933b1c510433565562ee684fe32c9943991f3ad7cc9165972745c6c45f6cb8e446d72fca909308ae49a64759c8f3629de8c1cc31471bcba2234606d1785729fc59aa6f6884c5c91cee86b8d3608201e78aa0a7c678dd4b374d348cbbfe68a5623fef3e39496f3d92820b47a3d70a7fd63b90272ff876d80797e06acedf6b1c8de3a942c2e72225ae315e468e455f656654c10968f8d18c1406dd63babeebc79d555cd9c213b19a7220412cb0f21709e11609e7d4a60c653dfddb8b82c06b52aaaf353fe9bb53eec81e01e37f31e9568f97f62718fdf95bfaea914e57b2b37c77427203ab2e159380c094110cdfbe891b037af808f174e7570e8b2c4cd8c916ff1fe1552e1f598b0f6b59084b336293116732745fcb3cae5333cd7de3685d90c28e60ab61973269c39267009389844a7234ad5034ffb082560490185661a3108f7b9cb541cfdf16392dac54433dfa106e03cfed0ceb698a272e98bd756ef9b489620314d90f51633d01eb866e58f763311f7f7db396aa0b69a71ca01139b4c807da6bbc8d4ab88a79b0135df8779dc500b0a2761c065d16386bee3e544ca1ba9907d339c334f382d9ae00d18279bbfe23c174e4bc42c39b2c9d27243c0f9ea9a9f4d6e93109f94c5ce78c7feba31c42804ddfe9790f6fdc7d5ca27195a91ad1295af9cc03a386d7c165792c3f1bdfcf6d64dc032ac36ec53493974c81e0cc2e2054ba8dadeec01db4ea8c51c31d8c66939fc963273de531aeeb8b18b46dd8bd45e42872423b3249217d30bd5b476f17944d41c19491871fbff03ced6c755b90107f2991e1c429a3951bdd9ba325a43f702c5cf052533f3a7d75354d9e467145a4aa1f20f13f42bfed1597e7a1a2083d4da89cdbe06a75e88a83c8afe5db11dba9084f4a0e479f59540fee7568049b52b0c8a69c03a8155badc0b7e5d650a09a1eaa200afae1cf7a04be23c29ed64e894539af9ab1a17f2acf0d3abbd0ea1f1e3d1300ad2d2b7f551d38e5cbfc478f75e53a1b06e1a7e101e33c515a5f57bfaa262a8fa2d19c341d0ddca331b6f50f8126eb6462c4d4309bde9ec834ea2be37c24ca3e9f16dc5de0e576bf483f99eaad44293c8f34ba54fe1b8f750f122f703616c9deb21f7a2cae50b0cf0b4a9ec368543b0b416f3c962d33b3cb886f0ec4e65a0751edefaa2508df540248cd2aff77948b78328355ac80b1204829736d3ca35f51818a0facde4fa6d67d808001da83add61f7fec2dee95f2bb937b50fe33cbcbae54fd7313d3387bf2845c396a2583105759834abfcaf55de52845d70c152acd4d7ee76ce2bf4e885a14fb22d1600f9dee972cf6646cf6a89d7c9931988bd7eb494e88aa0304bd2cbb94a914c74e503ebd90b344d837e9fc3ad8f604b010964f50f6a8509a325bb1f79a4ad1fc1dc05ac9a0aca92fb26c88fc1bf77d58b0a888fa242797b8570a49de704bada629073e98aefae2da778a7e0d9afc57de4393a21b136d982d06b0e5a70f61b22e71f083f5b358c28e57a90af22265b4646fedc34e070ee4f6135892addf0ba44edd314b370a7cb05e6f5a9c77a1832999581fcc4f1926204373606b3d720c47ffd3d04328b5a8c7f5de8d3a31ef32ee59be1f67d54962ba1f760f132378eec2c016c8180d6fe98ffb329329b7dff0d195fa360339e83a4873625f113b80cc6b7b4c8557293dd03aab1d3dc4bda7b341941605b9bd0f896c38235a0c40851d3c39d6d98087242ef31feb8e41f46b7a8425a3f8598d079ffae4318bf8ebb040fa9f02c15ff6edfa5166f5df1b69dc709a72963c6b7ad39b8e78a9b72bacbfbacecbe1f6e13794d6c817e2271884994036ccc5671a3e46db26622f95c264d99643e65328cebe21f515792fe9ed37026eb872d9981b139884f5f6ac6586ae24d85ac3e696d827b1cce31591f1f75ae1ca3788cb02fc89d621580e3f54d05bbfe01d13479d4808de4de074418ef0e04d853bb736e99922dbd423f4a32e3e093c39d0b1c1135b7317b89e514caac2dface7fd86a770cf6afa5f93b50411e82cffad1ad00c8fc27b6c6b90f4f413805a64f339a71eabd7d8b34d7d19fac313413e27b41c17c3dcd83dfcb65bce1615a0bbd51c7005a187d4859842c7586781c550a4e4aaa9b34fb310515ec4d98e702031884d10cad00edddd59dc10b57e392f64ff41fb81342a03a7cafffa6f5254a846f05259a2cc3f2fc03fd9cdd50ee2ac2dae07841d0325abf18bb45d4b2cd09b5add47547da379c566728f47d4e0e18781d46bd5323461bcc041b3a7633462a1a6a1300b6c6f90fd4e49843a1fdbd067a68f706190099baa84b9fbd099bd626b5717be60a7e9b95c75767be62527350041ffb4ada8b9de4c7b9d637b9dae21606ef19e409e84626282fcaeb2aade57a2eb5136dbb8f2a7dae6abbd020fa08989af294773f0d8dedba18cae03555f51f366abf30c7762d48c817b435ba735f503742c81733b7f99253af81b2d6be2398d8f7d9632381daff6bd1593745b821e60b6213adfe0aced38ed59c5c024ebcaf0ec9c03999521f94cad1805fa4e793ce0e3a69458003af23a8c140323557c92d9c6822a29332254645eb45ec55b16034d26b2d4aa7d76912c4aec6fe5e8431881db557d4a15dc9966bfb8d88427f04abdf71c4602119daf34584eb95d5e8fe0215b746c11024ea625d317606761375f6aa7dc5b36c8ab47e286aa1b2b665b213b029bfe128975a8da518bf0aad0125f386ffa728d45c3cd76d170940fe1245d4539c9b584d677ac142e651140a4a139386c22d902ddb47c7efc3fb9fc57e0fb496acd3c8e1038e1bd288101f092453f9f78a26329f51184b061a56fe789e53e323c44de428796f2b1ddd94a67d82ec2e6758c043da30888a95551ca978644ae1e0ed1f2476fa22759a37e4db9d4a4452ee4254422456cfaad992b32ffbd61ba7a0897c2ab1cdc133036436fd1396a1d4dafe2f22fcabaf7dafca07bb72cdddc53f20b5c7d5ecd29a27ea8b14974596449092965481a24b977c09cc98d026020afbd3817c8373ca056ff574929afb3372712aece0fde427e6764ade4357644e38d18af61783aee56396d3a08665837f67c194aef7bb5023b0f4de0d2c58bb199e10cdad0a4c2a67f8db88517f84444c503e669d521f36774fa5db3a0301b7409e0c7dd84690b785e0037f81052baba4c5360292de378ca945633a4682718c845819e2c500ce3d45dff4dc4210d96aa46ad23db857dc7e9f975ad8c8bf4462fd0ad37ac67bc304be26e541353da3710ce5e475544e2204d7dc9e65282a2182597acdad832bb841af97b29dc86d934b2652ea7890bfe2bb5014e285171dab472f8acca45152a4d79b1b4ef9015d7394b3d93752dea3d294b0517fb4369d5353e4a51e60dc3fb6a14706790c59617063f410355519118022a762d6a027a9ea6418cfea93cd7023233a7dc1bc373404c79920a3fec5adeefcb1aa125dd1ff0aa70b8d2d1969405574f69fbc72565f9b5d56f91fd53dde24271dbd7dc72e2768725652178537bd7709a8c4812be1a01687bdeb0bc23134d14535be5ab532376aedbf54fef5e3cb65920a4e6e1244e38397700b47c11b995cfb14a2f6fe2d40231f3f07f76d95f5cf473fe28dabecc2f9580683cd010ae4570acc9dfad0e0fabba3359382b84e4551b010aa64be84315e858c4104e3e0127cc08ca5a2198c410bf73e4a17385cc92951e67df2772b9490876586e38cf83b833d5230705ba279c1be76a4c64687459df51a5a89649fc3d797a6c2f772a2f086864c10a92c2c45479c1b94a9a18fdadf4165aac70dad3b408c38e3ce09c6ba2bc290da47d977aa01d29cc84159c69b8ab186d9949d627934a0fbac2fc36dfae2911c6299790b2685ad5852cca141b141ee3c7da2f259b9129bf4c77cf47635a19ee02f1f6f6f490464b09f7601d9c4e3b6b8cc81fb3ba7bada5580f99dfdaf2b99430f2c6b4e9dae9d3580d8f4cb57b3c4f3e02b487da1847f7f7d6e94cfb53c3696e5bdb7befe8a49f603019547ababecfad01d7bd61c9660687b96259675c1fb0583e4ab30f5cdd2dda633c9f4ae5fb2a07181e42a65abb0620087df802937c8e93146cb3670078d824901aa08bb3031544781b59945face945b2a1a94a94a75d1a8bfb18ec156211264707a9e6b42361e0ebe7199cf907deef60d3a5172963f66582fee1b48826016f5981f6c7b81b6eddfd34936eb3eb5bbc42b200d99304b03069ddb2ab5cd29560a1cfbf3149c29a7956ee2ea8b9a79bd8db7e5b2d1e3e941032ddaac342d2b5bdf5b4a649958dc0cb1db469374009d85649e3bafc8c19550cb1a63fa465ec667829a62de431412290f7172cad9fb0586456606c2ff8ed18271a7497fd623dac186f2a64236bee4fb18019f57d5763824f1d542da18f0d19b55854fa3410a55c5576189e10c17dc4963a6399eb49d3dde25674f6341a96465977faf345d84dab8597e1dc55f7077ab66ed339e3fd81e114f5a0c9e6fc5fcdf4f1862a054e930522713685ff6696b20466743e2dd46d2721758509d0b3bcedbb0184ab295c6deb8063e6a038ad47cad68df5b72bbcfe7f6fa82805affa8e3f76e3b75c2f899a56a721aa265ab9e4a959c6b2daef25d63ec4d8cbfec899ae84a40b18b382217a61e673f47c0821359841800cb15ecc0561f29e921f4806be9b6449b52e09546ad65d6be54d73a7a487ef5687cdd3ee74a728746085dc0e43074c2788ca95077435852f6a7c814ddbb5f35740102826228924e8b68dbf3d59f040a7770d86c3a36d79b03af07bddfb99e2d40b0f76e2b6fd6bef55f290c956adb65dee4c73d41c2ceb71a32a727169d5490efed50b8ccf44826ee3dc30186075d692e9c221879ce2112e4a1b83a4cc0ccfcbafe8f46b551bbf84ca9de21f16eef14f1a839a0b02478b5e14d0efccddc405da442a05e4628ef4fd5ce834b43cdbde42405cb8a39523108a49b4b8b310d2b7913d4cbcdc72e00849caf5bb0217ff3554df9eef5237fd86cc81b2b2ebfb8e6f8b24b5ad89ff6ac1b9190ba56b189a1b3f62c13985ce75ba739559d864759c9899dc23e1f5b027180f6bbee07758d5f1cc093329a583d548f73491ce9fa8bc5d3a5630833ca34d10038a979abfe2ebe7d0010353fbdce07fd88e00234cfe240df410af4e909bf9b65d6a377d9533074a8814b07462482e26111d3a24d1ece6a5ce8a9ceb242d81824bded2225f8990f0bea6fb374939e8b4acd307481e6811f6ef87661a850aebff655becab90bd816523c6e4f899c7ab91d723da5e60e3ad2854e805cc6ee9e49eff5449ea8512373c00cd8902538fe825d6d9b1df3b2ef249b17b24593985aa18b0532fb0178005c43ebc429b4fe195523ecec95b51b41b65aa920c725d7a59730cd552656fd8b690f4374e111a757fcda75a51b8ec35ef2710f78d7e38053d1ee378445367a4eb8050f50cad7c4b5848c336c678c521b19ba3a6f95800e448ad14f6fc2b7d244dc876eed952fd9d89c0047f93b9cf58246cf48160d0585dce7e11f8d706e1e7636dc3231a04b966f9649babdede211d225ed255e79fe80971a38697fa4867d9380e2e981fa46059b2b0edc75f20fd147ce830cecf2159d25dd06b3a9244a10ea8b96efd0e2abdf2849b3a56d6c9a6299f5670333cc6ae"}}]}, 0x1144}, 0x1, 0x0, 0x0, 0x400}, 0x844) r7 = accept(r2, &(0x7f0000001a40)=@can, &(0x7f0000001ac0)=0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001b80)={'ip6gre0\x00', &(0x7f0000001b00)={'syztnl0\x00', r5, 0x29, 0x1, 0x0, 0x1000, 0x3, @private2={0xfc, 0x2, '\x00', 0x7f}, @local, 0x1, 0x7, 0x8, 0x9}}) sendmsg$FOU_CMD_GET(r0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000001d40)={'ip6gre0\x00', &(0x7f0000001cc0)={'ip6tnl0\x00', r8, 0x4, 0xb7, 0xf0, 0x9, 0x10, @loopback, @mcast2, 0x8, 0x10, 0x3f, 0x4}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001dc0), r1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001f40)={'syztnl2\x00', &(0x7f0000001ec0)={'syztnl0\x00', r3, 0x29, 0x9, 0xa9, 0x1, 0x1a, @empty, @local, 0x10, 0x7, 0x3ff, 0x4bc}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000002080)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f80)={0xa4, r10, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4008040) accept(0xffffffffffffffff, &(0x7f00000020c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000002140)=0x80) [ 64.426423] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.428450] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.431543] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.435865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.437702] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.440707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.444504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.445462] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.470194] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.479960] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.490609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.493908] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.508464] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.510938] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.512656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.514291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.515930] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.519081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.520409] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.522149] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.526434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.531327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.532783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.539609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.542147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.555956] ================================================================== [ 64.557062] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x66d/0x6d0 [ 64.558050] Read of size 2 at addr ffff88801f8cfcb8 by task kworker/u11:8/304 [ 64.559364] [ 64.560166] CPU: 0 UID: 0 PID: 304 Comm: kworker/u11:8 Not tainted 6.18.0-rc5-next-20251114 #1 PREEMPT(voluntary) [ 64.560196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 64.560210] Workqueue: hci4 hci_cmd_work [ 64.560238] Call Trace: [ 64.560246] [ 64.560254] dump_stack_lvl+0xca/0x120 [ 64.560282] print_report+0xcb/0x610 [ 64.560309] ? __virt_addr_valid+0x100/0x5d0 [ 64.560334] ? hci_cmd_work+0x66d/0x6d0 [ 64.560360] ? hci_cmd_work+0x66d/0x6d0 [ 64.560386] kasan_report+0xca/0x100 [ 64.560413] ? hci_cmd_work+0x66d/0x6d0 [ 64.560442] hci_cmd_work+0x66d/0x6d0 [ 64.560470] process_one_work+0x8e1/0x19c0 [ 64.560505] ? __pfx_process_one_work+0x10/0x10 [ 64.560534] ? move_linked_works+0x172/0x270 [ 64.560558] ? assign_work+0x196/0x240 [ 64.560587] worker_thread+0x67e/0xe90 [ 64.560616] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 64.560641] ? __pfx_worker_thread+0x10/0x10 [ 64.560671] kthread+0x3c8/0x740 [ 64.560697] ? __pfx_kthread+0x10/0x10 [ 64.560723] ? ret_from_fork+0x79/0x7a0 [ 64.560744] ? lock_release+0xc8/0x290 [ 64.560775] ? __pfx_kthread+0x10/0x10 [ 64.560802] ret_from_fork+0x67a/0x7a0 [ 64.560822] ? __pfx_ret_from_fork+0x10/0x10 [ 64.560844] ? __switch_to+0x759/0x1060 [ 64.560872] ? __pfx_kthread+0x10/0x10 [ 64.560899] ret_from_fork_asm+0x1a/0x30 [ 64.560933] [ 64.560940] [ 64.584443] Allocated by task 287: [ 64.584985] kasan_save_stack+0x24/0x50 [ 64.585585] kasan_save_track+0x14/0x30 [ 64.586183] __kasan_slab_alloc+0x59/0x70 [ 64.586809] kmem_cache_alloc_node_noprof+0x228/0x6b0 [ 64.587580] __alloc_skb+0x2ab/0x370 [ 64.588151] hci_cmd_sync_alloc+0x34/0x300 [ 64.588788] __hci_cmd_sync_sk+0xf7/0x5c0 [ 64.589419] __hci_cmd_sync_status_sk+0x4d/0x1a0 [ 64.590145] hci_cmd_sync_status+0x4c/0x70 [ 64.590789] hci_dev_cmd+0x4d5/0x980 [ 64.591353] hci_sock_ioctl+0x493/0x810 [ 64.591953] sock_do_ioctl+0xd1/0x240 [ 64.592528] sock_ioctl+0x40d/0x630 [ 64.593070] __x64_sys_ioctl+0x18f/0x210 [ 64.593683] do_syscall_64+0xbf/0x430 [ 64.594256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.595028] [ 64.595289] Freed by task 306: [ 64.595764] kasan_save_stack+0x24/0x50 [ 64.596360] kasan_save_track+0x14/0x30 [ 64.596959] kasan_save_free_info+0x3a/0x60 [ 64.597612] __kasan_slab_free+0x43/0x70 [ 64.598138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.598220] kmem_cache_free+0x26f/0x500 [ 64.599815] kfree_skbmem+0x18a/0x1f0 [ 64.600387] sk_skb_reason_drop+0x10e/0x1b0 [ 64.601024] vhci_read+0x3d5/0x5d0 [ 64.601573] vfs_read+0x1eb/0xc70 [ 64.602094] ksys_read+0x121/0x240 [ 64.602646] do_syscall_64+0xbf/0x430 [ 64.603222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.603982] [ 64.604239] The buggy address belongs to the object at ffff88801f8cfc80 [ 64.604239] which belongs to the cache skbuff_head_cache of size 232 [ 64.606081] The buggy address is located 56 bytes inside of [ 64.606081] freed 232-byte region [ffff88801f8cfc80, ffff88801f8cfd68) [ 64.606922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.607833] [ 64.607841] The buggy address belongs to the physical page: [ 64.607851] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f8cf [ 64.609085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.609863] flags: 0x100000000000000(node=0|zone=1) [ 64.609882] page_type: f5(slab) [ 64.609901] raw: 0100000000000000 ffff8880096c78c0 dead000000000122 0000000000000000 [ 64.614284] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 64.615419] page dumped because: kasan: bad access detected [ 64.616257] [ 64.616522] Memory state around the buggy address: [ 64.617237] ffff88801f8cfb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.618295] ffff88801f8cfc00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 64.619338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.619372] >ffff88801f8cfc80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 64.621322] ^ [ 64.622072] ffff88801f8cfd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 64.623137] ffff88801f8cfd80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 64.623348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.624186] ================================================================== [ 64.624466] Disabling lock debugging due to kernel taint [ 64.628070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.633232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.634542] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.637172] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.638947] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.645145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.655909] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 64.655913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.658998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.660887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.518768] Bluetooth: hci0: command tx timeout [ 66.582814] Bluetooth: hci1: command tx timeout [ 66.646840] Bluetooth: hci4: command tx timeout [ 66.710866] Bluetooth: hci5: command tx timeout [ 66.710911] Bluetooth: hci3: command tx timeout [ 66.711453] Bluetooth: hci2: command tx timeout [ 66.712047] Bluetooth: hci6: command tx timeout [ 66.774795] Bluetooth: hci7: command tx timeout [ 68.566889] Bluetooth: hci0: command tx timeout [ 68.630792] Bluetooth: hci1: command tx timeout [ 68.695004] Bluetooth: hci4: command tx timeout [ 68.759018] Bluetooth: hci6: command tx timeout [ 68.759959] Bluetooth: hci2: command tx timeout [ 68.760663] Bluetooth: hci5: command tx timeout [ 68.761543] Bluetooth: hci3: command tx timeout [ 68.822806] Bluetooth: hci7: command tx timeout [ 70.615750] Bluetooth: hci0: command tx timeout [ 70.678766] Bluetooth: hci1: command tx timeout [ 70.743183] Bluetooth: hci4: command tx timeout [ 70.806779] Bluetooth: hci6: command tx timeout [ 70.807198] Bluetooth: hci5: command tx timeout [ 70.807557] Bluetooth: hci3: command tx timeout [ 70.807986] Bluetooth: hci2: command tx timeout [ 70.870756] Bluetooth: hci7: command tx timeout [ 72.662783] Bluetooth: hci0: command tx timeout [ 72.726806] Bluetooth: hci1: command tx timeout [ 72.790799] Bluetooth: hci4: command tx timeout [ 72.854842] Bluetooth: hci2: command tx timeout [ 72.855563] Bluetooth: hci3: command tx timeout [ 72.856869] Bluetooth: hci5: command tx timeout [ 72.857541] Bluetooth: hci6: command tx timeout [ 72.919803] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 07:34:14 Registers: info registers vcpu 0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8293dd05 RDI=ffffffff889747c0 RBP=ffffffff88974780 RSP=ffff88801641f618 R8 =0000000000000000 R9 =ffffed1001499046 R10=0000000000000061 R11=000000003a555043 R12=0000000000000061 R13=0000000000000010 R14=ffffffff88974780 R15=ffffffff8293dcf0 RIP=ffffffff8293dd5d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e538f000 00000000 00000000 LDT=0000 fffffe1600000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555b8ae6e8 CR3=000000001dbcc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f7d111c67c000007f7d111c67c8 XMM02=00007f7d111c67e000007f7d111c67c0 XMM03=00007f7d111c67c800007f7d111c67c0 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffff88801779fc08 RCX=ffff88801779fa94 RDX=1ffff11002ef3f82 RSI=ffffffff81bce6c5 RDI=ffff88801779fc10 RBP=0000000000000002 RSP=ffff88801779fb20 R8 =0000000000000001 R9 =ffff88801779fb80 R10=000000000003ca6e R11=0000000000027fb9 R12=ffff88801779fc08 R13=0000000000000000 R14=ffff888017060000 R15=0000000000000cc0 RIP=ffffffff8161a2b5 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e548f000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb98c0700a0 CR3=000000001f8c7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000