Warning: Permanently added '[localhost]:4812' (ECDSA) to the list of known hosts. 2024/10/24 19:56:30 fuzzer started 2024/10/24 19:56:31 dialing manager at localhost:45639 syzkaller login: [ 69.060483] cgroup: Unknown subsys name 'net' [ 69.170548] cgroup: Unknown subsys name 'cpuset' [ 69.189663] cgroup: Unknown subsys name 'rlimit' 2024/10/24 19:56:48 syscalls: 2217 2024/10/24 19:56:48 code coverage: enabled 2024/10/24 19:56:48 comparison tracing: enabled 2024/10/24 19:56:48 extra coverage: enabled 2024/10/24 19:56:48 setuid sandbox: enabled 2024/10/24 19:56:48 namespace sandbox: enabled 2024/10/24 19:56:48 Android sandbox: enabled 2024/10/24 19:56:48 fault injection: enabled 2024/10/24 19:56:48 leak checking: enabled 2024/10/24 19:56:48 net packet injection: enabled 2024/10/24 19:56:48 net device setup: enabled 2024/10/24 19:56:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/24 19:56:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/24 19:56:48 USB emulation: enabled 2024/10/24 19:56:48 hci packet injection: enabled 2024/10/24 19:56:48 wifi device emulation: enabled 2024/10/24 19:56:48 802.15.4 emulation: enabled 2024/10/24 19:56:48 fetching corpus: 50, signal 20187/21956 (executing program) 2024/10/24 19:56:48 fetching corpus: 100, signal 29970/33326 (executing program) 2024/10/24 19:56:48 fetching corpus: 150, signal 37962/42772 (executing program) 2024/10/24 19:56:48 fetching corpus: 200, signal 43580/49787 (executing program) 2024/10/24 19:56:48 fetching corpus: 250, signal 49297/56766 (executing program) 2024/10/24 19:56:49 fetching corpus: 300, signal 52783/61546 (executing program) 2024/10/24 19:56:49 fetching corpus: 350, signal 59305/69026 (executing program) 2024/10/24 19:56:49 fetching corpus: 400, signal 65227/75868 (executing program) 2024/10/24 19:56:50 fetching corpus: 450, signal 67952/79710 (executing program) 2024/10/24 19:56:50 fetching corpus: 500, signal 70018/82904 (executing program) 2024/10/24 19:56:50 fetching corpus: 550, signal 73814/87572 (executing program) 2024/10/24 19:56:50 fetching corpus: 600, signal 76123/90864 (executing program) 2024/10/24 19:56:50 fetching corpus: 650, signal 80327/95775 (executing program) 2024/10/24 19:56:51 fetching corpus: 700, signal 82086/98456 (executing program) 2024/10/24 19:56:51 fetching corpus: 750, signal 84333/101503 (executing program) 2024/10/24 19:56:51 fetching corpus: 800, signal 86449/104414 (executing program) 2024/10/24 19:56:51 fetching corpus: 850, signal 88901/107538 (executing program) 2024/10/24 19:56:51 fetching corpus: 900, signal 91059/110405 (executing program) 2024/10/24 19:56:51 fetching corpus: 950, signal 92717/112800 (executing program) 2024/10/24 19:56:52 fetching corpus: 1000, signal 94433/115263 (executing program) 2024/10/24 19:56:52 fetching corpus: 1050, signal 96527/117963 (executing program) 2024/10/24 19:56:52 fetching corpus: 1100, signal 98469/120464 (executing program) 2024/10/24 19:56:52 fetching corpus: 1150, signal 99708/122440 (executing program) 2024/10/24 19:56:53 fetching corpus: 1200, signal 101130/124465 (executing program) 2024/10/24 19:56:53 fetching corpus: 1250, signal 102790/126614 (executing program) 2024/10/24 19:56:53 fetching corpus: 1300, signal 104890/129101 (executing program) 2024/10/24 19:56:54 fetching corpus: 1350, signal 105973/130807 (executing program) 2024/10/24 19:56:54 fetching corpus: 1400, signal 107339/132699 (executing program) 2024/10/24 19:56:54 fetching corpus: 1450, signal 108687/134548 (executing program) 2024/10/24 19:56:54 fetching corpus: 1500, signal 109769/136240 (executing program) 2024/10/24 19:56:54 fetching corpus: 1550, signal 110743/137787 (executing program) 2024/10/24 19:56:54 fetching corpus: 1600, signal 111860/139429 (executing program) 2024/10/24 19:56:54 fetching corpus: 1650, signal 113287/141268 (executing program) 2024/10/24 19:56:55 fetching corpus: 1700, signal 114317/142766 (executing program) 2024/10/24 19:56:56 fetching corpus: 1750, signal 115319/144260 (executing program) 2024/10/24 19:56:56 fetching corpus: 1800, signal 116370/145786 (executing program) 2024/10/24 19:56:57 fetching corpus: 1850, signal 117356/147211 (executing program) 2024/10/24 19:56:57 fetching corpus: 1900, signal 118077/148447 (executing program) 2024/10/24 19:56:57 fetching corpus: 1950, signal 118845/149742 (executing program) 2024/10/24 19:56:57 fetching corpus: 2000, signal 119781/151120 (executing program) 2024/10/24 19:56:57 fetching corpus: 2050, signal 120570/152361 (executing program) 2024/10/24 19:56:58 fetching corpus: 2100, signal 121608/153693 (executing program) 2024/10/24 19:56:58 fetching corpus: 2150, signal 122290/154852 (executing program) 2024/10/24 19:56:58 fetching corpus: 2200, signal 122893/155916 (executing program) 2024/10/24 19:56:58 fetching corpus: 2250, signal 124128/157304 (executing program) 2024/10/24 19:56:59 fetching corpus: 2300, signal 125445/158785 (executing program) 2024/10/24 19:56:59 fetching corpus: 2350, signal 126318/160008 (executing program) 2024/10/24 19:56:59 fetching corpus: 2400, signal 126917/161032 (executing program) 2024/10/24 19:56:59 fetching corpus: 2450, signal 127730/162125 (executing program) 2024/10/24 19:57:00 fetching corpus: 2500, signal 128692/163288 (executing program) 2024/10/24 19:57:00 fetching corpus: 2550, signal 129288/164285 (executing program) 2024/10/24 19:57:00 fetching corpus: 2600, signal 129938/165277 (executing program) 2024/10/24 19:57:00 fetching corpus: 2650, signal 130920/166388 (executing program) 2024/10/24 19:57:00 fetching corpus: 2700, signal 132223/167662 (executing program) 2024/10/24 19:57:00 fetching corpus: 2750, signal 132934/168672 (executing program) 2024/10/24 19:57:01 fetching corpus: 2800, signal 133527/169602 (executing program) 2024/10/24 19:57:01 fetching corpus: 2850, signal 134106/170479 (executing program) 2024/10/24 19:57:01 fetching corpus: 2900, signal 134946/171499 (executing program) 2024/10/24 19:57:01 fetching corpus: 2950, signal 135555/172374 (executing program) 2024/10/24 19:57:02 fetching corpus: 3000, signal 136016/173176 (executing program) 2024/10/24 19:57:02 fetching corpus: 3050, signal 136677/174084 (executing program) 2024/10/24 19:57:02 fetching corpus: 3100, signal 137291/174925 (executing program) 2024/10/24 19:57:03 fetching corpus: 3150, signal 138144/175838 (executing program) 2024/10/24 19:57:03 fetching corpus: 3200, signal 138550/176622 (executing program) 2024/10/24 19:57:03 fetching corpus: 3250, signal 139282/177483 (executing program) 2024/10/24 19:57:03 fetching corpus: 3300, signal 140184/178389 (executing program) 2024/10/24 19:57:04 fetching corpus: 3350, signal 140829/179190 (executing program) 2024/10/24 19:57:04 fetching corpus: 3400, signal 141474/179966 (executing program) 2024/10/24 19:57:04 fetching corpus: 3450, signal 141840/180665 (executing program) 2024/10/24 19:57:04 fetching corpus: 3500, signal 142544/181471 (executing program) 2024/10/24 19:57:05 fetching corpus: 3550, signal 143057/182177 (executing program) 2024/10/24 19:57:05 fetching corpus: 3600, signal 143532/182840 (executing program) 2024/10/24 19:57:05 fetching corpus: 3650, signal 144000/183537 (executing program) 2024/10/24 19:57:05 fetching corpus: 3700, signal 144653/184280 (executing program) 2024/10/24 19:57:05 fetching corpus: 3750, signal 145266/184954 (executing program) [ 103.825213] hrtimer: interrupt took 3784215 ns 2024/10/24 19:57:06 fetching corpus: 3800, signal 145898/185577 (executing program) 2024/10/24 19:57:06 fetching corpus: 3850, signal 146388/186219 (executing program) 2024/10/24 19:57:06 fetching corpus: 3900, signal 147025/186898 (executing program) 2024/10/24 19:57:07 fetching corpus: 3950, signal 147579/187557 (executing program) 2024/10/24 19:57:07 fetching corpus: 4000, signal 148011/188126 (executing program) 2024/10/24 19:57:07 fetching corpus: 4050, signal 148435/188736 (executing program) 2024/10/24 19:57:07 fetching corpus: 4100, signal 149011/189376 (executing program) 2024/10/24 19:57:07 fetching corpus: 4150, signal 149432/189883 (executing program) 2024/10/24 19:57:07 fetching corpus: 4200, signal 149930/190440 (executing program) 2024/10/24 19:57:08 fetching corpus: 4250, signal 150358/191011 (executing program) 2024/10/24 19:57:08 fetching corpus: 4300, signal 150719/191541 (executing program) 2024/10/24 19:57:08 fetching corpus: 4350, signal 151051/192049 (executing program) 2024/10/24 19:57:08 fetching corpus: 4400, signal 151473/192531 (executing program) 2024/10/24 19:57:08 fetching corpus: 4450, signal 151986/193090 (executing program) 2024/10/24 19:57:08 fetching corpus: 4500, signal 152247/193608 (executing program) 2024/10/24 19:57:09 fetching corpus: 4550, signal 152628/194092 (executing program) 2024/10/24 19:57:09 fetching corpus: 4600, signal 152961/194578 (executing program) 2024/10/24 19:57:09 fetching corpus: 4650, signal 153300/195064 (executing program) 2024/10/24 19:57:09 fetching corpus: 4700, signal 154520/195565 (executing program) 2024/10/24 19:57:10 fetching corpus: 4750, signal 154979/195995 (executing program) 2024/10/24 19:57:10 fetching corpus: 4800, signal 155570/196451 (executing program) 2024/10/24 19:57:10 fetching corpus: 4850, signal 156176/196877 (executing program) 2024/10/24 19:57:10 fetching corpus: 4900, signal 156514/197318 (executing program) 2024/10/24 19:57:10 fetching corpus: 4950, signal 157160/197626 (executing program) 2024/10/24 19:57:11 fetching corpus: 5000, signal 158066/197634 (executing program) 2024/10/24 19:57:11 fetching corpus: 5050, signal 158470/197634 (executing program) 2024/10/24 19:57:11 fetching corpus: 5100, signal 158774/197634 (executing program) 2024/10/24 19:57:11 fetching corpus: 5150, signal 159159/197634 (executing program) 2024/10/24 19:57:12 fetching corpus: 5200, signal 159470/197634 (executing program) 2024/10/24 19:57:12 fetching corpus: 5250, signal 160001/197634 (executing program) 2024/10/24 19:57:12 fetching corpus: 5300, signal 160657/197634 (executing program) 2024/10/24 19:57:12 fetching corpus: 5350, signal 161551/197986 (executing program) 2024/10/24 19:57:13 fetching corpus: 5400, signal 161986/197986 (executing program) 2024/10/24 19:57:13 fetching corpus: 5450, signal 162282/197986 (executing program) 2024/10/24 19:57:13 fetching corpus: 5500, signal 162604/197986 (executing program) 2024/10/24 19:57:13 fetching corpus: 5550, signal 162868/197986 (executing program) 2024/10/24 19:57:14 fetching corpus: 5600, signal 163158/197986 (executing program) 2024/10/24 19:57:14 fetching corpus: 5650, signal 163489/197986 (executing program) 2024/10/24 19:57:14 fetching corpus: 5700, signal 163808/197986 (executing program) 2024/10/24 19:57:14 fetching corpus: 5750, signal 164261/197986 (executing program) 2024/10/24 19:57:14 fetching corpus: 5800, signal 164577/197986 (executing program) 2024/10/24 19:57:15 fetching corpus: 5850, signal 164932/197986 (executing program) 2024/10/24 19:57:15 fetching corpus: 5900, signal 165171/197986 (executing program) 2024/10/24 19:57:15 fetching corpus: 5950, signal 165471/197986 (executing program) 2024/10/24 19:57:16 fetching corpus: 6000, signal 165797/197986 (executing program) 2024/10/24 19:57:16 fetching corpus: 6050, signal 166225/197986 (executing program) 2024/10/24 19:57:16 fetching corpus: 6100, signal 166572/197986 (executing program) 2024/10/24 19:57:17 fetching corpus: 6150, signal 166818/197986 (executing program) 2024/10/24 19:57:17 fetching corpus: 6200, signal 167204/197986 (executing program) 2024/10/24 19:57:17 fetching corpus: 6250, signal 167441/197986 (executing program) 2024/10/24 19:57:17 fetching corpus: 6300, signal 167865/197988 (executing program) 2024/10/24 19:57:18 fetching corpus: 6350, signal 168120/197988 (executing program) 2024/10/24 19:57:18 fetching corpus: 6400, signal 168602/197988 (executing program) 2024/10/24 19:57:18 fetching corpus: 6450, signal 168990/197988 (executing program) 2024/10/24 19:57:18 fetching corpus: 6500, signal 169296/197988 (executing program) 2024/10/24 19:57:18 fetching corpus: 6550, signal 169727/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6600, signal 169904/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6650, signal 170235/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6700, signal 170551/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6750, signal 170809/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6800, signal 171008/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6850, signal 171313/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6900, signal 171543/197988 (executing program) 2024/10/24 19:57:19 fetching corpus: 6950, signal 171793/197988 (executing program) 2024/10/24 19:57:20 fetching corpus: 7000, signal 172139/197988 (executing program) 2024/10/24 19:57:20 fetching corpus: 7050, signal 172355/197988 (executing program) 2024/10/24 19:57:20 fetching corpus: 7100, signal 172638/197988 (executing program) 2024/10/24 19:57:20 fetching corpus: 7150, signal 172975/197988 (executing program) 2024/10/24 19:57:21 fetching corpus: 7200, signal 173342/197988 (executing program) 2024/10/24 19:57:21 fetching corpus: 7250, signal 173792/197988 (executing program) 2024/10/24 19:57:21 fetching corpus: 7300, signal 174127/197988 (executing program) 2024/10/24 19:57:21 fetching corpus: 7350, signal 174374/197989 (executing program) 2024/10/24 19:57:21 fetching corpus: 7400, signal 174753/197989 (executing program) 2024/10/24 19:57:22 fetching corpus: 7450, signal 175140/197989 (executing program) 2024/10/24 19:57:22 fetching corpus: 7500, signal 175380/197989 (executing program) 2024/10/24 19:57:22 fetching corpus: 7550, signal 175590/197989 (executing program) 2024/10/24 19:57:23 fetching corpus: 7600, signal 175930/197989 (executing program) 2024/10/24 19:57:23 fetching corpus: 7650, signal 176171/197989 (executing program) 2024/10/24 19:57:23 fetching corpus: 7700, signal 176446/197989 (executing program) 2024/10/24 19:57:23 fetching corpus: 7750, signal 176759/197989 (executing program) 2024/10/24 19:57:24 fetching corpus: 7800, signal 177016/197989 (executing program) 2024/10/24 19:57:24 fetching corpus: 7850, signal 177294/197989 (executing program) 2024/10/24 19:57:24 fetching corpus: 7900, signal 177462/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 7950, signal 177958/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8000, signal 178214/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8050, signal 178503/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8100, signal 178777/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8150, signal 178977/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8200, signal 179172/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8250, signal 179336/197989 (executing program) 2024/10/24 19:57:25 fetching corpus: 8300, signal 179565/197989 (executing program) 2024/10/24 19:57:26 fetching corpus: 8350, signal 179725/197989 (executing program) 2024/10/24 19:57:26 fetching corpus: 8400, signal 180010/197989 (executing program) 2024/10/24 19:57:26 fetching corpus: 8450, signal 180194/197989 (executing program) 2024/10/24 19:57:26 fetching corpus: 8500, signal 180535/197989 (executing program) 2024/10/24 19:57:27 fetching corpus: 8550, signal 180727/197989 (executing program) 2024/10/24 19:57:27 fetching corpus: 8600, signal 180951/197989 (executing program) 2024/10/24 19:57:27 fetching corpus: 8650, signal 181129/197989 (executing program) 2024/10/24 19:57:27 fetching corpus: 8700, signal 181293/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 8750, signal 181603/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 8800, signal 181843/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 8850, signal 182055/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 8900, signal 182292/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 8950, signal 182449/197989 (executing program) 2024/10/24 19:57:28 fetching corpus: 9000, signal 182606/197989 (executing program) 2024/10/24 19:57:29 fetching corpus: 9050, signal 182766/197989 (executing program) 2024/10/24 19:57:29 fetching corpus: 9100, signal 182949/197989 (executing program) 2024/10/24 19:57:29 fetching corpus: 9150, signal 183168/197989 (executing program) 2024/10/24 19:57:29 fetching corpus: 9200, signal 183423/197989 (executing program) 2024/10/24 19:57:29 fetching corpus: 9250, signal 183606/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9300, signal 183784/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9350, signal 183967/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9400, signal 184167/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9450, signal 184508/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9500, signal 184721/197989 (executing program) 2024/10/24 19:57:30 fetching corpus: 9550, signal 184909/197990 (executing program) 2024/10/24 19:57:30 fetching corpus: 9600, signal 185214/197990 (executing program) 2024/10/24 19:57:30 fetching corpus: 9650, signal 185441/197990 (executing program) 2024/10/24 19:57:30 fetching corpus: 9700, signal 185663/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 9750, signal 185870/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 9800, signal 186165/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 9850, signal 186347/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 9900, signal 186561/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 9950, signal 186785/197990 (executing program) 2024/10/24 19:57:31 fetching corpus: 10000, signal 187041/197992 (executing program) 2024/10/24 19:57:31 fetching corpus: 10050, signal 187235/197992 (executing program) 2024/10/24 19:57:31 fetching corpus: 10100, signal 187446/197992 (executing program) 2024/10/24 19:57:31 fetching corpus: 10150, signal 187662/197992 (executing program) 2024/10/24 19:57:31 fetching corpus: 10200, signal 187814/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10250, signal 187950/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10300, signal 188174/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10350, signal 188389/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10400, signal 188545/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10450, signal 188712/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10500, signal 188894/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10550, signal 189080/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10600, signal 189270/197992 (executing program) 2024/10/24 19:57:32 fetching corpus: 10650, signal 189393/197992 (executing program) 2024/10/24 19:57:33 fetching corpus: 10700, signal 189584/197992 (executing program) 2024/10/24 19:57:33 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/24 19:57:33 fetching corpus: 10741, signal 189848/197992 (executing program) 2024/10/24 19:57:36 starting 8 fuzzer processes 19:57:36 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, r0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x13c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7fff}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0xc000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x70, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d9b9b0b300"}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "5b2515255a0e553b5f87c39b629f35"}]]}, 0x70}}, 0x40) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff23e2}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008095}, 0x4040000) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x180000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netpci0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x0, 0x10, 0x70bd27, 0x7, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008880}, 0x4011) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040001}, 0x90) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000f40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4041}, 0x20008840) 19:57:36 executing program 1: ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000000)={0x800, {0x1, 0x400, 0x80000000, 0x664, 0x6}}) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140), 0x6e, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/198, 0xc6}, {&(0x7f00000002c0)=""/204, 0xcc}, {&(0x7f00000003c0)=""/179, 0xb3}], 0x3, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x20) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000005c0)={'trans=unix,', {[{@posixacl}, {@aname={'aname', 0x3d, '@'}}, {@access_uid={'access', 0x3d, r0}}, {@access_client}, {@aname={'aname', 0x3d, '-[\\]*!,#'}}, {@noextend}, {@aname={'aname', 0x3d, '&)'}}, {@privport}, {@cache_fscache}], [{@euid_lt}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@pcr={'pcr', 0x3d, 0x11}}, {@measure}]}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000006c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000940)={{r3}, r4, 0x2, @inherit={0x70, &(0x7f00000008c0)={0x1, 0x5, 0x6, 0x1000, {0x2, 0xac94, 0x8, 0x6, 0x800}, [0x3, 0x1000, 0x3, 0x5, 0x4]}}, @devid}) r6 = fsopen(&(0x7f0000001940)='ramfs\x00', 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r6, 0x50009418, &(0x7f0000001980)={{r3}, r5, 0x14, @unused=[0x380000000000000, 0x4638, 0x6, 0xccd1], @devid}) r7 = fcntl$dupfd(r1, 0x406, r1) ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0) recvmsg$unix(r2, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000002980)=""/4096, 0x1000}, {&(0x7f0000003980)=""/4, 0x4}, {&(0x7f00000039c0)=""/182, 0xb6}, {&(0x7f0000003a80)=""/216, 0xd8}], 0x4, &(0x7f0000003bc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x100) recvmsg$unix(r8, &(0x7f0000006200)={&(0x7f0000003c40)=@abs, 0x6e, &(0x7f00000060c0)=[{&(0x7f0000003cc0)=""/138, 0x8a}, {&(0x7f0000003d80)=""/199, 0xc7}, {&(0x7f0000003e80)=""/53, 0x35}, {&(0x7f0000003ec0)=""/252, 0xfc}, {&(0x7f0000003fc0)=""/223, 0xdf}, {&(0x7f00000040c0)=""/4096, 0x1000}, {&(0x7f00000050c0)=""/4096, 0x1000}], 0x7, &(0x7f0000006140)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}, 0x80000000) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f0000006240)={0x800, 0x3, 0x0, 0x1, 0x5, [{0x27a2, 0x4, 0x8, '\x00', 0x4}, {0x80, 0x36a9afb5, 0x20, '\x00', 0x10a}, {0x1, 0x3, 0x6, '\x00', 0x408}, {0x8, 0x27, 0x7, '\x00', 0x2080}, {0x5, 0x6, 0x3, '\x00', 0x202}]}) r10 = openat$random(0xffffffffffffff9c, &(0x7f0000006380), 0x200, 0x0) r11 = memfd_secret(0x0) close_range(r10, r11, 0x0) r12 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000063c0)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000006400)) r13 = syz_mount_image$iso9660(&(0x7f0000006600), &(0x7f0000006640)='./file0\x00', 0x6, 0x3, &(0x7f0000006900)=[{&(0x7f0000006680)="b07b84f8f17d0bfb866f8983027d287da694c68f153cdd56156f36d2d48352a274218ed491d1510c9957fa7362ebfb191ae5ca94baac7e1c16cf525d13661cea99453cec009a0c5827ed62b457577f96742810aa7af9bae12ba3a55fcbd3893bdacd2c96bb7a0039004aeaadb219b31306b1465d53f1f58d63e83986b3407025da35661da32c15f41b06c844226113af6e5008e2b105bf0afef21f681c8c995daa340fbaf3cea1d31c7d47f064ae7437ea36fc2c91ee24c45c0b51ceb1deb93ec695", 0xc2, 0x100000000}, {&(0x7f0000006780)="70fae692d2afcfddaf460505471d8b0b2f780d5a39f374e8d730d456bfcab16c0e2b26b3122c042c1baacddfd2dc9134807ee274f39ba3ce960088ea4ea968739f860dc28d9f66f0b42700f5a83bf47be7468d8e5ff6fe1fca7381f313bdedc14739daebd7fe67b6e32e42bc017713d558760d0c272879b089d2457955badc5a9cbadbd8461f147338ff997a39c55ea9c81ea8bb37ae40deefeb9610793bea2eb4149fbe404101fa8a1058745e9b3528eedd4c1778bb7c5236c378942444b826dd72", 0xc2, 0x13ec}, {&(0x7f0000006880)="1fa01bb86c39f3cc7cf1a29846b63d10b2cb091b98e651326bbec0dbcaf73237cbfe11c94c3f5ebdbfaf8e413056861bb05421dc212095774efe639407716ca2cd1b4e494697097a8ccfb6", 0x4b, 0x101}], 0x2000008, &(0x7f0000006980)={[{@session={'session', 0x3d, 0x2f}}, {@uid={'uid', 0x3d, r0}}, {@sbsector}], [{@appraise}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/random\x00'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, 'euid<'}}]}) ioctl$EXT4_IOC_CHECKPOINT(r13, 0x4004662b, &(0x7f0000006a40)=0x1) 19:57:36 executing program 2: shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x180, 0xa2e1}, 0x1000, 0x401, 0x8, 0x9, 0xffffffffffffffff, 0x0, 0xfffb}) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000080)=""/255) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000400)={{0x2, 0xee00, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x30, 0xffff}, 0x100, 0x80000001, 0x924c, 0x1000, 0x0, 0xffffffffffffffff, 0x4}) r2 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) r3 = shmget(0x1, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r5 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, r1}}, './file0\x00'}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000580)=0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f00000005c0)={{0x2, r4, r5, r0, r7, 0x195, 0xff}, 0x5, 0x3, 0xfffffffffffffffb, 0x2, 0x0, r8, 0x3}) setsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000640)={r8, r0, r1}, 0xc) r9 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffb000/0x2000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000740)={{0x3, r10, 0x0, 0x0, 0xee00, 0x27, 0x1000}, 0x80, 0x0, 0x5, 0x324, r8, r8, 0x10}) [ 134.079810] audit: type=1400 audit(1729799856.290:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:57:36 executing program 3: write(0xffffffffffffffff, &(0x7f0000000000)="e7aa9be4bfc3c48b92dd5be2b71039970380029b20bd633de541e0f0a9f412685cd008c4b05af8d691ce500cf7964e4857c1d9f207a803b24b6909f83bd183526a30c69ce63a29", 0x47) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2043, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r0, r1, 0x0, 0xfffffffffffffffb) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) lseek(r1, 0x80, 0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x1}) fsetxattr$security_ima(r0, &(0x7f0000000140), &(0x7f0000000180)=@v1={0x2, "f2ba21c94e7be68119b543df71"}, 0xe, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000200)={0x5, 0x2, {0x0, 0x1, 0x4, 0x0, 0x8}, 0x3}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) r4 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x12, 0x9, 0xb, 0x20, 0x0, 0x8, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0x3}, 0x0, 0x1f, 0x4, 0x6, 0x7, 0x7, 0x5, 0x0, 0x7, 0x0, 0x810000}, 0xffffffffffffffff, 0x8, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r5, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x22}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004080) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f00000004c0), &(0x7f0000000540)=0x68) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r4, r7, &(0x7f0000000580)=0x4, 0x40) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)=0x2000000) lsetxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), &(0x7f0000000680), 0x2, 0x1) 19:57:36 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000000)={0x7c, 0x20000000, 0x7000, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000040)={0x36, 0x20000000, 0x0, 0x1, 0x3, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x3, 0x20000800, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000000c0)={0x7, 0x20001000, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100)={0x2, 0x1000, 0xffffffffffffcfff, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000140)={0x7ff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000180)={0x8, 0x20000000, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x568, 0x100000, 0x400, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000200)={0x0, 0x20001000, 0x4000, 0x1, 0x3, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000240)={0x8001, 0x100000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000280)={0x40, 0x20000800, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000002c0)={0xffff3220, 0x20000000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) get_thread_area(&(0x7f0000000300)={0x0, 0x20001000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}) modify_ldt$write2(0x11, &(0x7f0000000340)={0x3465, 0x0, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000380)={0x1f, 0x100000, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000003c0)={0x5279, 0x20000000, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000400)={0x9, 0x20001000, 0x1000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000440)={0x3, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000480)={0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000004c0)={0x10001, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) 19:57:36 executing program 5: sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10050}, 0x4000000) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x815}, 0x800) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f00000002c0)={0x4e8, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "22f0dca01901fb966c7eb3d4314e5f983c1117d86c21d296cb29935eee9d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "53f32f857d928e73ebb964979700ca4c711e9192f43c55af"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xad9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "6f9999b809e2f02539b33dadb23c206ef76d3526d25f1a79f1fe2276f31e662aed51"}}, @TIPC_NLA_NODE_ID={0xf4, 0x3, "8d429864a508bb501b3d04b5dbf47cd533e1bd0951cb8fa83328b838e9748d31d590ba32c0f9fbc2c8b1c31d0243ec9785bc832bf44c7599033c4be193e7ceb3dbeb023526d7ee427cd6373ccef6b8c34a4911f0b4674d140edf0bb70d9a08aacf884368ed241e276abb940e9f31460fc24d427fda63dc580029d81a99a7e07859ccf1577b3e4f6e58087157ef084fff3b795c0a6360a669d91f9969f7061609999f136d94784fe5ab3e2a65e608ee2d41694d2af0f442127ebfa6a8ba365763bc7f890167a14dff8ed2f90c3d651e051932ec6437a5a3ed33191de4e92335ce18c243294caf246882ce5060808d9015"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "013b5d389c6f81b06ca208ce567ef6f5cd1b0ef49bf23212e818433e631131a5"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xa0}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x5}}}}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "71691c9bf52a8f012943bd414c2b9be131d52ba0"}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x124, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x100, @empty, 0x52d}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x20, @private2, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffff3c}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x800, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x400, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @private0, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x40}, 0x2000c000) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x4000000) pread64(r0, &(0x7f0000000980)=""/77, 0x4d, 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000a00)={0xffffffffffffffff, 0x3, 0x8, 0x5}) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x50, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2837d246}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000bc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000010) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x48, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, 0x3, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8100}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x400400c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x94000200}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x64, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x30}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x80}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x8b8}]}, 0x64}}, 0x20004804) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000011c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x281}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4001) pread64(0xffffffffffffffff, &(0x7f0000001300)=""/4, 0x4, 0x0) 19:57:36 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x101840, 0x0) r1 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) r2 = dup3(r0, r0, 0x80000) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0xb1, 0xff) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x120, 0x14, 0x100, 0x70bd28, 0x25dfdbfd, {0x2a, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "82d6b5e8"}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c85}, 0x204c800) fsync(r3) ioctl$HIDIOCGREPORT(r2, 0x400c4807, &(0x7f0000000380)={0x1, 0x1, 0x7fff}) pidfd_send_signal(r1, 0x2d, &(0x7f00000003c0)={0x26, 0x1000, 0x3f}, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000440)={0x40a, 0x1, 0x1}, &(0x7f0000000480)=[{}]) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) dup(r2) getpeername$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) epoll_create(0x5) r5 = accept(r3, &(0x7f0000000680)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000700)=0x80) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0xc, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f0000000880)=""/99, 0x63}], 0x1, 0x0, 0x5) 19:57:36 executing program 7: sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3ec, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1615}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @local, 0x1000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x28e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3ff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @empty, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @remote, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x29}, 0x7}}}}]}, @TIPC_NLA_NODE={0x1f0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf200000}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "1aa1eb937c1f43ce511a1e1f641615c0ca00b9aa017b8985aee7b5bec1648e411ed2f321a16e0d3fa2db6d5d445c75e49975ba3f091a835b7c3a2031945afe750b74ee298da813a1bd2984caee3731213e3eb34d3c71f081fbf8d2ad6530079ae710bc182e782345871f631c1d179158226ba9c2b0f8f1e6c32b5f54d5d43d55380a21ecd8478fc32f19a68160db43fa36fa50118e7c7c2dbfb4322868fb"}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "34f89706373c96063eb90f12bf7b13ced60d6009242569e41fa345e315bf0f114abd6b39bc68c6f2ea1f9b8ac5f220c4c1be236e02ef48cf58703c3c21fcd97318292a31b32771f64f2fe252ee1dac191dde739a4deaa31f1c7869ccaf7f18eb01246c02858f3ddc7d8b601444579609ed10b39a30397fd1ddd79ebf86a941650005d83305b8ca188cc0893a7275400fb841b0efbe022c2fd4d7b8a1b62f8551c4a8c16236aa141d5af846f0d17d69ab7dbbfed0b311f651baf92bd423faa3"}, @TIPC_NLA_NODE_ID={0x76, 0x3, "7dcaa7727449f9763fc6d3dd2c49a5200029522f067c8b0243c8e7683ba8807a4dbd63bbc5e466492ef5ef4a6f6e5e74a57004679c4a1bf625d7ceb67426a9a9960543b0e7c01f7946462f52566edfa7bcf46fb89a77ddd768bae8a7d72a44dd7e72703ab66c51f89d84c3bbcd9c327b91ee"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1286}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf63}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1a6a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4815) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xa4, 0x0, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFCTH_TUPLE={0x74, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x101}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x100}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x800) socketpair(0x28, 0x1, 0x80000000, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r2, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x51}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x49}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x4050) r3 = creat(&(0x7f00000009c0)='./file0\x00', 0x80) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000000a00)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x284, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x34, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4c52}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54375b61}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c036b5a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x771f}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda51}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x104, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2728150a}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3561afed}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41781e8b}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x25}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dbd497d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x258a908a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a374d5e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a281ac2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1cea3207}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44f541f3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56413e82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c288a1d}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x145aeefb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7fff}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe829}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8953}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22d7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50ad5e0f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b2eab59}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc91}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x70ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7d9f236a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6f08e8d0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3528}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4e92}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x54be2bdf}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2753}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x942ceeb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6375}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6299}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6bac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff0aa2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x986c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3108}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0xa}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x284}, 0x1, 0x0, 0x0, 0x40400d0}, 0x20040090) r5 = eventfd(0x4) r6 = dup2(r0, r5) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r6) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x14, r7, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x2010) pipe(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f00000010c0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000fc0)={0xa4, 0x2, 0x8, 0x0, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x388}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1f}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x967b}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4044005}, 0x40) syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), r9) read$eventfd(r8, &(0x7f0000001140), 0x8) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x70, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) [ 135.521457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 135.523109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 135.524429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 135.527131] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 135.534477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 135.537429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 135.539002] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 135.542982] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 135.545453] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 135.552916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.554543] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.555731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.609391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 135.610865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 135.613834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 135.614855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 135.617048] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 135.620024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 135.630519] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 135.632986] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 135.635354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 135.637989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 135.638948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 135.639112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.685361] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 135.691402] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.691902] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.696027] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.697131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.698345] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 135.699331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.700483] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 135.702134] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 135.704280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.707874] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 135.710637] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 135.712228] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.712415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.716084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.717178] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 135.717963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 135.719118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.732547] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 135.738461] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 135.743339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.756545] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 135.779009] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.792166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 137.577272] Bluetooth: hci1: command tx timeout [ 137.641659] Bluetooth: hci0: command tx timeout [ 137.706118] Bluetooth: hci2: command tx timeout [ 137.707126] Bluetooth: hci3: command tx timeout [ 137.768734] Bluetooth: hci6: command tx timeout [ 137.832765] Bluetooth: hci7: command tx timeout [ 137.832811] Bluetooth: hci4: command tx timeout [ 137.833904] Bluetooth: hci5: command tx timeout [ 139.626332] Bluetooth: hci1: command tx timeout [ 139.690266] Bluetooth: hci0: command tx timeout [ 139.753653] Bluetooth: hci3: command tx timeout [ 139.754126] Bluetooth: hci2: command tx timeout [ 139.816791] Bluetooth: hci6: command tx timeout [ 139.880946] Bluetooth: hci5: command tx timeout [ 139.880984] Bluetooth: hci4: command tx timeout [ 139.881398] Bluetooth: hci7: command tx timeout [ 141.673752] Bluetooth: hci1: command tx timeout [ 141.737852] Bluetooth: hci0: command tx timeout [ 141.800766] Bluetooth: hci2: command tx timeout [ 141.801236] Bluetooth: hci3: command tx timeout [ 141.865867] Bluetooth: hci6: command tx timeout [ 141.928860] Bluetooth: hci4: command tx timeout [ 141.929406] Bluetooth: hci7: command tx timeout [ 141.929918] Bluetooth: hci5: command tx timeout [ 143.721661] Bluetooth: hci1: command tx timeout [ 143.784782] Bluetooth: hci0: command tx timeout [ 143.848702] Bluetooth: hci2: command tx timeout [ 143.849786] Bluetooth: hci3: command tx timeout [ 143.912700] Bluetooth: hci6: command tx timeout [ 143.976698] Bluetooth: hci5: command tx timeout [ 143.976735] Bluetooth: hci7: command tx timeout [ 143.977152] Bluetooth: hci4: command tx timeout [ 198.343070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 198.346244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.346843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.349026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.349136] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 198.351000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 198.351368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.359347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.360602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.362238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 198.365953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.368442] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 198.369546] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 198.371513] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.373265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 198.395214] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.397845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.399164] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.411504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.418049] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.419871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.436106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.438135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.439246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.446299] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.447368] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.450024] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.451168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 198.453092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.457377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.458410] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.459975] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.464820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.466331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.469721] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.471002] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.473208] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.476999] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 198.478069] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.485358] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.487002] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 198.488258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.520149] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 198.525874] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 198.534256] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 198.545851] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 198.547811] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 198.548966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 200.426660] Bluetooth: hci2: command tx timeout [ 200.426710] Bluetooth: hci1: command tx timeout [ 200.427658] Bluetooth: hci0: command tx timeout [ 200.488665] Bluetooth: hci4: command tx timeout [ 200.553694] Bluetooth: hci6: command tx timeout [ 200.554344] Bluetooth: hci5: command tx timeout [ 200.554390] Bluetooth: hci3: command tx timeout [ 200.619632] Bluetooth: hci7: command tx timeout [ 202.473627] Bluetooth: hci0: command tx timeout [ 202.474183] Bluetooth: hci1: command tx timeout [ 202.474627] Bluetooth: hci2: command tx timeout [ 202.536790] Bluetooth: hci4: command tx timeout [ 202.600718] Bluetooth: hci6: command tx timeout [ 202.600865] Bluetooth: hci3: command tx timeout [ 202.601204] Bluetooth: hci5: command tx timeout [ 202.664875] Bluetooth: hci7: command tx timeout [ 204.520723] Bluetooth: hci1: command tx timeout [ 204.521811] Bluetooth: hci2: command tx timeout [ 204.522071] Bluetooth: hci0: command tx timeout [ 204.585291] Bluetooth: hci4: command tx timeout [ 204.648841] Bluetooth: hci3: command tx timeout [ 204.649312] Bluetooth: hci5: command tx timeout [ 204.649696] Bluetooth: hci6: command tx timeout [ 204.714708] Bluetooth: hci7: command tx timeout [ 206.568731] Bluetooth: hci2: command tx timeout [ 206.569263] Bluetooth: hci0: command tx timeout [ 206.569777] Bluetooth: hci1: command tx timeout [ 206.632718] Bluetooth: hci4: command tx timeout [ 206.696732] Bluetooth: hci6: command tx timeout [ 206.697502] Bluetooth: hci5: command tx timeout [ 206.697998] Bluetooth: hci3: command tx timeout [ 206.760689] Bluetooth: hci7: command tx timeout [ 260.637508] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.643955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.655760] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.665977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.667753] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 260.669062] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.989504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.993037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.995168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.996511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.998938] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.001798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.003322] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 261.004505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.005053] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.010814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.038048] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 261.045765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.070841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.074796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.076812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.081767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.090240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 261.092307] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.151016] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.155430] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.156027] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.163885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.168287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.174961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.177980] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.178019] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.179830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.180197] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.182155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.182315] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.184418] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.187858] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 261.190094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.191265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.192133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.193795] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.195669] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 261.197343] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.206959] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.207814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.242493] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 261.245761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.711210] Bluetooth: hci0: command tx timeout [ 263.080708] Bluetooth: hci1: command tx timeout [ 263.081940] Bluetooth: hci2: command tx timeout [ 263.144885] Bluetooth: hci3: command tx timeout [ 263.209692] Bluetooth: hci4: command tx timeout [ 263.272844] Bluetooth: hci6: command tx timeout [ 263.275147] Bluetooth: hci5: command tx timeout [ 263.336986] Bluetooth: hci7: command tx timeout [ 264.744684] Bluetooth: hci0: command tx timeout [ 265.128715] Bluetooth: hci1: command tx timeout [ 265.129291] Bluetooth: hci2: command tx timeout [ 265.192675] Bluetooth: hci3: command tx timeout [ 265.256791] Bluetooth: hci4: command tx timeout [ 265.320905] Bluetooth: hci6: command tx timeout [ 265.321464] Bluetooth: hci5: command tx timeout [ 265.385141] Bluetooth: hci7: command tx timeout [ 266.792687] Bluetooth: hci0: command tx timeout [ 267.176679] Bluetooth: hci1: command tx timeout [ 267.178338] Bluetooth: hci2: command tx timeout [ 267.259645] Bluetooth: hci3: command tx timeout [ 267.304787] Bluetooth: hci4: command tx timeout [ 267.368659] Bluetooth: hci5: command tx timeout [ 267.369138] Bluetooth: hci6: command tx timeout [ 267.432781] Bluetooth: hci7: command tx timeout [ 268.840734] Bluetooth: hci0: command tx timeout [ 269.224903] Bluetooth: hci1: command tx timeout [ 269.225414] Bluetooth: hci2: command tx timeout [ 269.288731] Bluetooth: hci3: command tx timeout [ 269.352653] Bluetooth: hci4: command tx timeout [ 269.416826] Bluetooth: hci6: command tx timeout [ 269.418310] Bluetooth: hci5: command tx timeout [ 269.480768] Bluetooth: hci7: command tx timeout [ 323.315403] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.366296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.370300] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.372721] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.374479] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 323.375702] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.570287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.571914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.582180] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.584312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.586980] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.588118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.594453] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.595735] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 323.598493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.604757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.610304] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 323.611736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.649989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.657706] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.659812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.670643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.672640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.679980] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.752286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.755901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.758707] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.762266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.765153] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 323.766439] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.882289] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.896800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.901872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.904407] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.906517] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.946009] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.960858] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.981537] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.983082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.984010] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 323.986403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 323.987492] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.989333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.992212] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 323.998027] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.998896] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.017051] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 324.046813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.417652] Bluetooth: hci0: command tx timeout [ 325.674719] Bluetooth: hci1: command tx timeout [ 325.736613] Bluetooth: hci2: command tx timeout [ 325.800698] Bluetooth: hci3: command tx timeout [ 325.864686] Bluetooth: hci7: command tx timeout [ 326.056643] Bluetooth: hci6: command tx timeout [ 326.312679] Bluetooth: hci5: command tx timeout [ 326.569716] Bluetooth: hci4: command tx timeout [ 327.465725] Bluetooth: hci0: command tx timeout [ 327.720820] Bluetooth: hci1: command tx timeout [ 327.785599] Bluetooth: hci2: command tx timeout [ 327.849759] Bluetooth: hci3: command tx timeout [ 327.914777] Bluetooth: hci7: command tx timeout [ 328.104893] Bluetooth: hci6: command tx timeout [ 328.362014] Bluetooth: hci5: command tx timeout [ 328.616606] Bluetooth: hci4: command tx timeout [ 329.512610] Bluetooth: hci0: command tx timeout [ 329.769784] Bluetooth: hci1: command tx timeout [ 329.833710] Bluetooth: hci2: command tx timeout [ 329.897682] Bluetooth: hci3: command tx timeout [ 329.961718] Bluetooth: hci7: command tx timeout [ 330.153732] Bluetooth: hci6: command tx timeout [ 330.408608] Bluetooth: hci5: command tx timeout [ 330.666196] Bluetooth: hci4: command tx timeout [ 331.561820] Bluetooth: hci0: command tx timeout [ 331.816857] Bluetooth: hci1: command tx timeout [ 331.882243] Bluetooth: hci2: command tx timeout [ 331.944715] Bluetooth: hci3: command tx timeout [ 332.011001] Bluetooth: hci7: command tx timeout [ 332.200669] Bluetooth: hci6: command tx timeout [ 332.457097] Bluetooth: hci5: command tx timeout [ 332.712612] Bluetooth: hci4: command tx timeout [ 385.790360] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.792233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.798827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.802902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.808250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 385.816099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.175410] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.177347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.180397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.181280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.183823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.185572] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.186891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.189399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 386.191897] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.192857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.195931] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.199976] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.243153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.246773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.248498] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.250933] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.252145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.258473] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.262475] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.264338] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.265245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.273922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.277435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 386.279265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.292914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.304945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.309550] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.312185] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.320253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.326055] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.332169] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.337320] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 386.339729] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 386.347448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.351842] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 386.353300] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.421480] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.480883] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.489860] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.517943] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.527015] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 386.534053] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.886643] Bluetooth: hci0: command tx timeout [ 388.264646] Bluetooth: hci2: command tx timeout [ 388.265744] Bluetooth: hci1: command tx timeout [ 388.328625] Bluetooth: hci3: command tx timeout [ 388.392689] Bluetooth: hci5: command tx timeout [ 388.394484] Bluetooth: hci4: command tx timeout [ 388.522481] Bluetooth: hci6: command tx timeout [ 388.585767] Bluetooth: hci7: command tx timeout [ 389.930628] Bluetooth: hci0: command tx timeout [ 390.312711] Bluetooth: hci1: command tx timeout [ 390.312747] Bluetooth: hci2: command tx timeout [ 390.378603] Bluetooth: hci3: command tx timeout [ 390.440732] Bluetooth: hci4: command tx timeout [ 390.440841] Bluetooth: hci5: command tx timeout [ 390.568608] Bluetooth: hci6: command tx timeout [ 390.632619] Bluetooth: hci7: command tx timeout [ 391.976690] Bluetooth: hci0: command tx timeout [ 392.360779] Bluetooth: hci2: command tx timeout [ 392.360812] Bluetooth: hci1: command tx timeout [ 392.425575] Bluetooth: hci3: command tx timeout [ 392.488616] Bluetooth: hci5: command tx timeout [ 392.489648] Bluetooth: hci4: command tx timeout [ 392.616666] Bluetooth: hci6: command tx timeout [ 392.682726] Bluetooth: hci7: command tx timeout [ 394.024646] Bluetooth: hci0: command tx timeout [ 394.408686] Bluetooth: hci2: command tx timeout [ 394.409684] Bluetooth: hci1: command tx timeout [ 394.472667] Bluetooth: hci3: command tx timeout [ 394.536849] Bluetooth: hci4: command tx timeout [ 394.537344] Bluetooth: hci5: command tx timeout [ 394.665593] Bluetooth: hci6: command tx timeout [ 394.731703] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 20:02:40 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000002 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff8880090249a0 RDI=ffff88800be15ce8 RBP=ffff8880090249a0 RSP=ffff88802fbf7a00 R8 =0000000000000000 R9 =ffff88800be15cb8 R10=0000000000000001 R11=0000000000000000 R12=ffff88800be15280 R13=ffff88800be15cc0 R14=00000000ffffffff R15=ffff88800be15ce8 RIP=ffffffff84822dff RFL=00000057 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2bc09bb540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f2bc0e70000 CR3=000000002ccc4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff110064b1981 RCX=ffffffff847b3fa7 RDX=ffff88800be13700 RSI=ffffffff847b3fc0 RDI=0000000000000001 RBP=ffff88802eb97ad8 RSP=ffff88802eb975b0 R8 =0000000000000000 R9 =fffffbfff0c7e4e9 R10=0000000000000000 R11=00000000000c2f81 R12=ffff88800b6e1206 R13=ffff88803258cc00 R14=0000000000000000 R15=ffff88802eb97950 RIP=ffffffff847b3fc4 RFL=00000217 [----APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f233e39e260 CR3=0000000038572000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000