Warning: Permanently added '[localhost]:1901' (ECDSA) to the list of known hosts. 2024/11/06 00:11:10 fuzzer started 2024/11/06 00:11:10 dialing manager at localhost:46317 syzkaller login: [ 73.018332] cgroup: Unknown subsys name 'net' [ 73.135355] cgroup: Unknown subsys name 'cpuset' [ 73.157487] cgroup: Unknown subsys name 'rlimit' 2024/11/06 00:11:28 syscalls: 218 2024/11/06 00:11:28 code coverage: enabled 2024/11/06 00:11:28 comparison tracing: enabled 2024/11/06 00:11:28 extra coverage: enabled 2024/11/06 00:11:28 setuid sandbox: enabled 2024/11/06 00:11:28 namespace sandbox: enabled 2024/11/06 00:11:28 Android sandbox: enabled 2024/11/06 00:11:28 fault injection: enabled 2024/11/06 00:11:28 leak checking: enabled 2024/11/06 00:11:28 net packet injection: enabled 2024/11/06 00:11:28 net device setup: enabled 2024/11/06 00:11:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/06 00:11:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/06 00:11:28 USB emulation: enabled 2024/11/06 00:11:28 hci packet injection: enabled 2024/11/06 00:11:28 wifi device emulation: enabled 2024/11/06 00:11:28 802.15.4 emulation: enabled 2024/11/06 00:11:28 fetching corpus: 0, signal 0/0 (executing program) 2024/11/06 00:11:30 starting 8 fuzzer processes 00:11:30 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x7) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, &(0x7f00000000c0), &(0x7f0000000100)={[0x2]}, 0x8) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, &(0x7f0000000180)={0x0, 0x989680}, &(0x7f00000001c0), 0x8) socketpair(0x27, 0x800, 0x27dc, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x800) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000280)={0x20000000}) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x25f8}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_EXPECT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}]}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x48004) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000540)=[{}, {}, {}, {}], 0x4, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0xd5]}, 0x8) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xfc, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_TESTDATA={0x81, 0x45, "5ce8d2f4cc894c17d9a70d87dbdacba89cb29d87e65c333f7fe65f2fe23bb8fff0b00b00066b657fd97092fc1a1f8d38a0cabdfdbe3cbbf60c87e41e3ecede03bcd1beffbb1ea496efec8bb315f367d0f183ef8c301cc6e331793cc857aafb88bd27647308c9518e4c9b7820d84d0a620c68c005119af58093e3101c2c"}, @NL80211_ATTR_TESTDATA={0x4f, 0x45, "4a6936aa19a20e05e676faeba4e26228db6207cafb4954d70cf09ae549eb96c4ca518cdf7356ad15744d3979c02e03363c1c79ce1546f524b86b4ebf849030cbea9926975b7ab2bcfa28f9"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r2 = socket$inet(0x2, 0x1, 0x3ff) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000007c0)={0xc}) mmap$perf(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x20012, 0xffffffffffffffff, 0xc1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r5 = io_uring_setup(0xf3a, &(0x7f0000000980)={0x0, 0x8fa1, 0x4, 0x2, 0x157, 0x0, r1}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r5, &(0x7f0000000a00)={0x90001000}) epoll_wait(0xffffffffffffffff, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x0) getuid() 00:11:30 executing program 1: sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x9}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x4800) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x5c3e4309f9926898}, 0xc, &(0x7f00000013c0)={&(0x7f0000000140)={0x1280, 0x1, 0x6, 0x5, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x3}, [@generic="a34acca32abf2733ae4d9f645def5c91db2383bd7a4de93d33e3f7c266", @nested={0x1010, 0x3b, 0x0, 0x1, [@generic="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", @typed={0x4, 0x63}, @typed={0x8, 0x24, 0x0, 0x0, @pid}]}, @nested={0xad, 0x7f, 0x0, 0x1, [@generic="52cb887c5a8cb6e8cba788dda34aedc291023c9d413befd02d5eeecadc8369883e5c1116a37754dd32930753b211a8d915c364f54c63f8a02da343af496030ba58b506be078a9a0f03cb43f5316761e9e4cf6ea3cb8343c71e73784963086b9e7dd3227d52ee572f1925d0f7a64afc075e8afdb65f10612fd95a24450a5716614de53047a546de38c8a8ef701edb0622ca5d97c12cf18c46cea74c5e505d99ec40fa13f24b06df378f"]}, @generic="b542bdc5fa909d38f409a10624c5b3ae536604bfea8b4ab6e1027f1249175152e563d0f2e95d0327dd4da696caa8093ad8485ba2132e2646f9d32c2f27", @nested={0x150, 0x26, 0x0, 0x1, [@typed={0xc, 0x2c, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x74, 0x0, 0x0, @u32=0x7f}, @typed={0x37, 0x5e, 0x0, 0x0, @binary="c9dfee7c7b905e0f92583632dc93b9334564781d729d3bcebf0fdeb46c6430d6020b2675041eb36ac0448af10a228b2a7b724d"}, @typed={0xfd, 0x61, 0x0, 0x0, @binary="5476fd4360ef3569d81b9a0fb80f26ed1b1170f2acf4cfbce9309a4b9e8869e68330942c0e3b0ba1282e27053529b99d26afe36b744831a15f7cf1ed524be9c3e8113b663a1b92dd00163a929ed68ed5ef220569f3ebeb5529a4e75b612eb358a635b4b96562a8b879d764ce430181b18be65ac0491d6d7679270f670b24dc7744d0f2d682da607b1cb970eba13e6f0b52aaeb91591e486f717232572ba65bf68e7bfbd068fd21a445119dfa6b1ad8efc3d7d092cfa899502a77b109cb299fc6ff974a3dddd11da0a19e71c66bd61b6f87270d927173f9b8271e4d4dc5106ab4fffcc8b9b74b17af64d0300a5a1645f581fbee0a0407186996"}]}]}, 0x1280}, 0x1, 0x0, 0x0, 0x80}, 0x4) r0 = fsmount(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x44802) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, 0x0, 0x633, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x401c}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x20, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x20, r1, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe64, 0x5e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000018c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000019c0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x58, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4884) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000001a40)={0x0, @generic={0x8, "9cb3438692c8fb122468f1f51bd8"}, @rc={0x1f, @none}, @llc={0x1a, 0x1dd70a36018380fc, 0x3c, 0x0, 0x80, 0xcf, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x288, &(0x7f0000001a00)='veth1_to_bridge\x00', 0x9, 0xfffffffffffffffe, 0x775}) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r1, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0xc0, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x564, 0x4d}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x90, 0xbe, "6d35c97ce2a5331fe7a6ef8573e0a616e296794e19c8d74b591f9d25120e7e433ae5330b30a3f613e3b011aec27ffcd6cde445461316a042a2c9975d0f23c29e6588f7e6eaf2ebfa6ac7b959cf5138ac79a6161bdead3b9bd9a9c838999df3d871b897da4d8172095badd85c5d8a8db6092f2f453db7102a0be608917f43324e4faf857fafb7d88a994b5d80"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x77c}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x804) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0), 0x482000, 0x0) sendmsg$NL80211_CMD_TESTMODE(r6, &(0x7f0000002480)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002440)={&(0x7f0000002340)={0xdc, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x499, 0x58}}}}, [@NL80211_ATTR_TESTDATA={0xd, 0x45, "798507d5731bb2f914"}, @NL80211_ATTR_TESTDATA={0x68, 0x45, "682917dcee876245c717c81b3a01e12aac1bf7daacd70624f750f2f90e5bdcef86a0333196b6b97f98aaf90c1e11713bbe36e124c0c3965826b3cb918353dd6c09eaaaea53d93a4ae3187b48de62245d587351ff5bedc3dcf31ea9c9de7d78d3e67ce8fd"}, @NL80211_ATTR_TESTDATA={0x42, 0x45, "41191d0afe7aa5869ccba0efa1ac24df2d557447d99ae8adb6c0afa2a810a93aefd5b91e9f0172e423d0c80699d23719255420860f5a1cec1956918baf8c"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x4010) r7 = fsmount(r0, 0x1, 0x0) fspick(r7, &(0x7f00000024c0)='./file0\x00', 0x1) 00:11:30 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x519, 0x34}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", ""]}, 0x1c}}, 0x8040) socketpair(0xb, 0xa, 0x2, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0d0}, 0x44081) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x148, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x8, 0x8000]}, @CTA_TUPLE_REPLY={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_MASTER={0x48, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3f}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x84) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xf8, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}]}, 0xf8}}, 0x10084) sendmsg$NL80211_CMD_ABORT_SCAN(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x5f}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xc8, r0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x27}, @void, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x21, 0xc5, "c0e5e5079b03818b2cf0e5e83fbe36b834e7ddf9de3dca34ef1ec19ea4"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x20, 0xc5, "258b3e01aacbfdb30fb5407f0e0f58574a4006b723c633bb3255e374"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0x4e, 0xc5, "c694dc420f6c9a2b351548d0ca5f5efa0d14f6578672ba9e1652cca96449e8a862d18f34b637d9f90b205764ce1a62c90aedafbcb41079dc994f9824b28c883709590daf8e61458292e2"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8001}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r0, 0x20, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040041}, 0x4008045) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000c40), 0x428180, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x28, r2, 0x500, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x55}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x20040000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r8) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x41140220}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}}, 0x4) 00:11:30 executing program 3: socketpair(0x1d, 0x4, 0x61, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) recvmsg(r1, &(0x7f0000000280)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/183, 0xb7}], 0x1, &(0x7f0000000200)=""/105, 0x69}, 0x8000) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x824, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}}, 0x4) write$tun(r3, &(0x7f0000000400)={@void, @void, @eth={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xc, 0x6, "d7da4a", 0x2e2, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@dstopts={0x3b, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x5, 0x5, [0x7, 0x9, 0x4, 0x0]}}]}, @srh={0x8, 0xe, 0x4, 0x7, 0x81, 0x60, 0x9, [@private1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0xdd, 0x2b, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x80}, @generic={0xe4, 0xc6, "938104869117b2c6920b125b2e8f792a45ef04df2cb645a16e288bc238b694d1f44f2a4bc832c23018ed6fe63d02bd854cb3c58f0546ebb22fe622a5092b8d1e8cdddc3d9aaef4a3e178d2780a6db1a9379a9671726bc20d64e1b52777545ac85bc69f950c17ed90d0e384cad74bd9012f19681bf684b43177c762b0f2ce61bf9318318c1c4db7c0a3e495bda81ad265d0e6659920a5812da2e60a7588df8afdc5224e081c3d4eba1d26eb9ed9c6dd7b011915d53c583ba6e8a909b797fd94550d5ad35ab943"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x9, [0x7, 0x5, 0x4, 0x80]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0x3, 0x5, [0xfff]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x0, [0x7fff, 0x3d9c, 0xd2bc, 0x1, 0x9, 0x80]}}]}, @routing={0x3c, 0xc, 0x0, 0x5, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, @empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0xea, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x30, {0x0, 0xa, 0x5, 0x101, [0x8f50, 0x6, 0xb77, 0x400, 0x5]}}, @pad1, @ra={0x5, 0x2, 0xdc4a}, @enc_lim={0x4, 0x1, 0x4}, @pad1]}], {0x4e21, 0x4e23, 0x12, 0x0, @gue={{0x2, 0x1}, "bbfa"}}}}}}}}, 0x318) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x40, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4004045) getsockname(0xffffffffffffffff, &(0x7f00000008c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000940)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, 0x0, 0x1, 0x1f, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x2e}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000000) getsockname(r1, &(0x7f0000000ac0)=@generic, &(0x7f0000000b40)=0x80) r8 = fsmount(0xffffffffffffffff, 0x1, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000000b80)='\x00', 0x0, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_NAN(r10, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, r2, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x80000001, 0x66}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000d00), 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r2, 0x608, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x2, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44080}, 0x4) [ 91.832842] audit: type=1400 audit(1730851890.429:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:11:30 executing program 4: ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000000)={0x291, 0xc}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x74}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4040001) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000240)={0x4, {{0x2, 0x4e24, @loopback}}, 0x1, 0x1, [{{0x2, 0x4e20, @local}}]}, 0x110) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x90020040}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}}, 0x800) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="e5257b495857"}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x4000081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x15) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, r2, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8fe, 0x2c}}}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x37c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffe}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x159bfc9}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x545}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfff}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7, 0x1, 0x5, 0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3c3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xa177}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x80000001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x6, 0x7, 0x0, 0x6, 0x4, 0x6, 0x200, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x6, 0x5]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x6]}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000094) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) write$tun(r3, &(0x7f0000000900)={@void, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @multicast2, @link_local, @multicast2}}, 0x1c) r4 = shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) shmdt(r4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000940)={0x401, {{0x2, 0x4e20, @multicast1}}, 0x0, 0x4, [{{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @remote}}]}, 0x290) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000c00)={0x0, 0x4, r3, 0x4, 0x80000}) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000c40)={'\x00', 0x8000, 0x2, 0xffff}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc850}, 0x4000000) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000dc0)='\x00', 0x0, r3) 00:11:30 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8880}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x20040081) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x320, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x445f}]}, @NL802154_DEVKEY_ATTR_ID={0x90, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xac}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1e4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_DEVKEY_ATTR_ID={0xf0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x80, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x320}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1a8, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xc4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x80}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ce8c65b9a18171ddf2e9e778881b9b0d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "916584100f958400eb557c8ddf9be1211eb7fed3da98d1f194d84def2d24d755"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xb1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}]}, @NL802154_ATTR_SEC_KEY={0xc4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xec0}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1e8}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4122810cd46e69558a9aeff1b98d778f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "30c6ca280a5fb1143d91475ffc2323bbb063c1ccb388ebd8e8ca78ff99f830af"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000001}, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0x8c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x8}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000005}, 0x24000000) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r3, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x37}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x60}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xa5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x81}, 0x40081) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x58, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4010}, 0x81) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r7, 0x8, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f40), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000010c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x50, r8, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r9}, {0x8}, {0x8, 0x1, r10}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10011}, 0x4000811) 00:11:30 executing program 6: mq_open(&(0x7f0000000000)='%\\##\x00', 0x2, 0x56, &(0x7f0000000040)={0x5, 0x8, 0x4, 0x38c4}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4081}, 0x48040) syz_open_dev$char_usb(0xc, 0xb4, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000240)=@isdn, 0x80, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/51, 0x33}, {&(0x7f0000001380)=""/230, 0xe6}, {&(0x7f0000001480)=""/188, 0xbc}], 0x5, &(0x7f00000015c0)=""/47, 0x2f}, 0x40002000) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x20, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x811}, 0x8080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001800)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index=0x9, 0x4, &(0x7f0000001740)="c489f56b7c655d172bccfd28a27a9eb1c7f9c75c167927f5aa1e3257a3182db7c79063be4d4c8b3ccb8f8c8471b2ee4225b8569d46773776d699a548414ca132bae8125972cc560549ae688d03bfefdad0c157796d7c00b5dc87e170886c05ee6c5d80f339c2abab9f75b868455046eb8daf5e27c84b44528de6a4c5bcf46655fd", 0x81, 0x2, 0x1319b0cbf7e12691}, 0x101) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001880)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000001940)={&(0x7f0000001840), 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4000014) socketpair(0xf, 0xa, 0x80000000, &(0x7f0000001980)={0xffffffffffffffff}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x5c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x7e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044850}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000001c40)={&(0x7f0000001b00), 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x31a0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001cc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x50, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001e00)) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x20004000) 00:11:30 executing program 7: mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="93fc7c47e8ab8bedf02bd00afe66d47bcd0880", 0x13, 0x81, &(0x7f0000000040)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x400100, 0x0) mq_timedreceive(r0, &(0x7f00000000c0)=""/20, 0x14, 0x9947, &(0x7f0000000100)={0x77359400}) mq_open(&(0x7f0000000140)='/dev/full\x00', 0x40, 0x12a, &(0x7f0000000180)={0x3ff, 0x6, 0x0, 0x3}) r1 = socket(0x4a9ef0c44049ecb5, 0x80000, 0x10000) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1) r2 = socket(0x1e, 0x80000, 0x87) r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x0, 0x80, 0xf9, 0xd1, 0x7d, 0xa4, 0x0, 0x7f, 0x96208, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x7}, 0x2100, 0x20, 0x8, 0x7, 0x10000, 0x8, 0x8, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, r0, 0x5, 0xffffffffffffffff, 0x3) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000340)={0x0, 0x7209, 0xfffffff8}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0xc840) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x8}) r4 = add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, &(0x7f0000000540)="39ec4d86b4f6af2ca2d19e6e6413d4303977ec561086a8151a7a5529c9209fb171fee86db26f7d316b43e67a39eadad026b1dbde7953aa7ea8ce8198dd0ad3b59e6e85eb7c3d8ec0eb32dc2684878ae4da157cc4a63f965750", 0x59, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r4}, &(0x7f0000000600)=""/79, 0x4f, &(0x7f00000006c0)={&(0x7f0000000680)={'crc32c-generic\x00'}}) mq_open(&(0x7f0000000700)='mptcp_pm\x00', 0x40, 0x64, &(0x7f0000000740)={0x2, 0x10001, 0x1, 0x3ff}) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_TUPLE_MASTER={0x64, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x0, 0x1, 0x59, 0x0, 0x0, 0x8, 0x1004, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfba0, 0x0, @perf_bp={&(0x7f00000009c0), 0x6}, 0x8, 0x3, 0x101, 0x4, 0xe54, 0x8, 0xff, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000940)={0x1, 0x80, 0x6, 0x0, 0x1, 0x1f, 0x0, 0x10000, 0x30000, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000900), 0x1}, 0x40, 0x8, 0x7, 0x2, 0x2, 0x6, 0x5, 0x0, 0x1, 0x0, 0x4}, r0, 0xc, r5, 0x6) r7 = fsmount(0xffffffffffffffff, 0x1, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000a80)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000b00)={r8, 0x1, r6, 0x8}) [ 93.331465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.335987] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.337669] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.340395] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.342872] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.343727] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.345295] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.354276] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.355608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.360566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.364306] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.367379] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.387429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.388946] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.400397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.403115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.404898] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.406203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.448639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.453774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.458178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.459583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.460864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.465598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.467101] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.468419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.473535] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.475054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 93.477062] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.478761] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.480391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.482056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.484586] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 93.486311] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.491405] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 93.494666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.506399] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.511015] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 93.516404] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.518903] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.520926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 93.523430] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 93.529639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 93.530494] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 93.532587] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 93.533732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 93.538706] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 93.551025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 95.420692] Bluetooth: hci2: command tx timeout [ 95.420698] Bluetooth: hci0: command tx timeout [ 95.420938] Bluetooth: hci1: command tx timeout [ 95.547518] Bluetooth: hci5: command tx timeout [ 95.548650] Bluetooth: hci4: command tx timeout [ 95.618035] Bluetooth: hci6: command tx timeout [ 95.618801] Bluetooth: hci7: command tx timeout [ 95.619479] Bluetooth: hci3: command tx timeout [ 97.467320] Bluetooth: hci2: command tx timeout [ 97.467361] Bluetooth: hci1: command tx timeout [ 97.467838] Bluetooth: hci0: command tx timeout [ 97.595415] Bluetooth: hci4: command tx timeout [ 97.595952] Bluetooth: hci5: command tx timeout [ 97.659256] Bluetooth: hci7: command tx timeout [ 97.659328] Bluetooth: hci3: command tx timeout [ 97.659800] Bluetooth: hci6: command tx timeout [ 99.515248] Bluetooth: hci1: command tx timeout [ 99.515775] Bluetooth: hci0: command tx timeout [ 99.516283] Bluetooth: hci2: command tx timeout [ 99.643258] Bluetooth: hci5: command tx timeout [ 99.645177] Bluetooth: hci4: command tx timeout [ 99.707284] Bluetooth: hci3: command tx timeout [ 99.707496] Bluetooth: hci7: command tx timeout [ 99.708824] Bluetooth: hci6: command tx timeout [ 101.563267] Bluetooth: hci2: command tx timeout [ 101.564702] Bluetooth: hci0: command tx timeout [ 101.564760] Bluetooth: hci1: command tx timeout [ 101.711231] Bluetooth: hci4: command tx timeout [ 101.711302] Bluetooth: hci5: command tx timeout [ 101.755251] Bluetooth: hci3: command tx timeout [ 101.755434] Bluetooth: hci7: command tx timeout [ 101.755788] Bluetooth: hci6: command tx timeout [ 153.405614] syz-executor.1 (281) used greatest stack depth: 23664 bytes left [ 155.979731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.987196] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.990403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.992806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.998379] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.999517] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.016600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.018602] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.021467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.026414] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.036589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.039788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.056450] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.063574] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.074780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.080646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.107780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.111579] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.124708] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.132975] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.133522] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 156.135422] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.136392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 156.137536] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.143001] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.144688] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.146191] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.158459] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 156.164575] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 156.166663] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 156.177574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 156.181491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 156.185421] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 156.209519] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 156.214931] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 156.220834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 156.235809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 156.244834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 156.246291] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 156.291387] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 156.292970] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 156.298919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 156.311982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 156.370358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 156.375733] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 156.410687] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 156.428564] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 156.437038] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 158.075300] Bluetooth: hci0: command tx timeout [ 158.076037] Bluetooth: hci1: command tx timeout [ 158.203326] Bluetooth: hci2: command tx timeout [ 158.204239] Bluetooth: hci4: command tx timeout [ 158.268560] Bluetooth: hci3: command tx timeout [ 158.332676] Bluetooth: hci6: command tx timeout [ 158.333497] Bluetooth: hci5: command tx timeout [ 158.524202] Bluetooth: hci7: command tx timeout [ 160.124229] Bluetooth: hci1: command tx timeout [ 160.124780] Bluetooth: hci0: command tx timeout [ 160.251293] Bluetooth: hci4: command tx timeout [ 160.251804] Bluetooth: hci2: command tx timeout [ 160.315238] Bluetooth: hci3: command tx timeout [ 160.380331] Bluetooth: hci6: command tx timeout [ 160.381823] Bluetooth: hci5: command tx timeout [ 160.571244] Bluetooth: hci7: command tx timeout [ 162.171463] Bluetooth: hci1: command tx timeout [ 162.173235] Bluetooth: hci0: command tx timeout [ 162.299257] Bluetooth: hci4: command tx timeout [ 162.300765] Bluetooth: hci2: command tx timeout [ 162.363747] Bluetooth: hci3: command tx timeout [ 162.428172] Bluetooth: hci5: command tx timeout [ 162.429563] Bluetooth: hci6: command tx timeout [ 162.621158] Bluetooth: hci7: command tx timeout [ 164.219477] Bluetooth: hci1: command tx timeout [ 164.221030] Bluetooth: hci0: command tx timeout [ 164.347393] Bluetooth: hci4: command tx timeout [ 164.349192] Bluetooth: hci2: command tx timeout [ 164.412175] Bluetooth: hci3: command tx timeout [ 164.475393] Bluetooth: hci6: command tx timeout [ 164.476794] Bluetooth: hci5: command tx timeout [ 164.668182] Bluetooth: hci7: command tx timeout [ 201.922013] hrtimer: interrupt took 6560295 ns [ 218.167569] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.169284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.170662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.179273] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.180317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.181370] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.185314] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.186350] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.188328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.189477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.194554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.195408] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.246677] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.254824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.264867] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.270298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.278478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.283342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.308622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.313528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.328890] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.333772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.340342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.342865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.477480] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.478957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.498493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.500643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.507574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.519047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.523969] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.529064] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.533355] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.534425] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.536407] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.539424] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.547506] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.548536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.551395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.609685] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.611522] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.612552] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.662211] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.665772] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.668462] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 218.724846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.727844] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.730333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.219250] Bluetooth: hci0: command tx timeout [ 220.220620] Bluetooth: hci1: command tx timeout [ 220.347212] Bluetooth: hci2: command tx timeout [ 220.411204] Bluetooth: hci3: command tx timeout [ 220.681175] Bluetooth: hci4: command tx timeout [ 220.682043] Bluetooth: hci5: command tx timeout [ 220.737482] Bluetooth: hci7: command tx timeout [ 220.987404] Bluetooth: hci6: command tx timeout [ 222.268296] Bluetooth: hci0: command tx timeout [ 222.269784] Bluetooth: hci1: command tx timeout [ 222.395251] Bluetooth: hci2: command tx timeout [ 222.459242] Bluetooth: hci3: command tx timeout [ 222.715464] Bluetooth: hci5: command tx timeout [ 222.715992] Bluetooth: hci4: command tx timeout [ 222.779221] Bluetooth: hci7: command tx timeout [ 223.035202] Bluetooth: hci6: command tx timeout [ 224.315238] Bluetooth: hci1: command tx timeout [ 224.315770] Bluetooth: hci0: command tx timeout [ 224.444167] Bluetooth: hci2: command tx timeout [ 224.508252] Bluetooth: hci3: command tx timeout [ 224.764287] Bluetooth: hci5: command tx timeout [ 224.764808] Bluetooth: hci4: command tx timeout [ 224.828219] Bluetooth: hci7: command tx timeout [ 225.083402] Bluetooth: hci6: command tx timeout [ 226.363210] Bluetooth: hci0: command tx timeout [ 226.363726] Bluetooth: hci1: command tx timeout [ 226.492207] Bluetooth: hci2: command tx timeout [ 226.555272] Bluetooth: hci3: command tx timeout [ 226.811495] Bluetooth: hci4: command tx timeout [ 226.812023] Bluetooth: hci5: command tx timeout [ 226.892135] Bluetooth: hci7: command tx timeout [ 227.131397] Bluetooth: hci6: command tx timeout [ 280.400330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.414361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.416570] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.420539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.425432] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.431306] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.454180] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.456509] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.460480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.467682] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.469824] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 280.470954] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.530734] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 280.534395] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 280.538781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 280.542607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 280.545448] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 280.549457] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 280.601613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.605410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.610408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.614866] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.623760] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 280.626002] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.716547] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.738852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.754752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.761044] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.773356] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.775633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.806752] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 280.810411] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 280.812364] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.823654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 280.826004] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.828535] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 280.830762] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 280.834297] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 280.836071] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.840670] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 280.855590] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 280.857916] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 280.876319] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.877450] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 280.880376] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 280.881826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.889307] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 280.916834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 282.491205] Bluetooth: hci1: command tx timeout [ 282.492006] Bluetooth: hci0: command tx timeout [ 282.622187] Bluetooth: hci2: command tx timeout [ 282.684162] Bluetooth: hci3: command tx timeout [ 282.811225] Bluetooth: hci4: command tx timeout [ 282.939219] Bluetooth: hci5: command tx timeout [ 282.940011] Bluetooth: hci7: command tx timeout [ 283.003300] Bluetooth: hci6: command tx timeout [ 284.539260] Bluetooth: hci0: command tx timeout [ 284.539786] Bluetooth: hci1: command tx timeout [ 284.667189] Bluetooth: hci2: command tx timeout [ 284.731162] Bluetooth: hci3: command tx timeout [ 284.859471] Bluetooth: hci4: command tx timeout [ 284.987393] Bluetooth: hci7: command tx timeout [ 284.987908] Bluetooth: hci5: command tx timeout [ 285.051201] Bluetooth: hci6: command tx timeout [ 286.587252] Bluetooth: hci1: command tx timeout [ 286.587837] Bluetooth: hci0: command tx timeout [ 286.715242] Bluetooth: hci2: command tx timeout [ 286.779162] Bluetooth: hci3: command tx timeout [ 286.908115] Bluetooth: hci4: command tx timeout [ 287.035187] Bluetooth: hci7: command tx timeout [ 287.036657] Bluetooth: hci5: command tx timeout [ 287.099170] Bluetooth: hci6: command tx timeout [ 288.635340] Bluetooth: hci0: command tx timeout [ 288.635923] Bluetooth: hci1: command tx timeout [ 288.763279] Bluetooth: hci2: command tx timeout [ 288.828131] Bluetooth: hci3: command tx timeout [ 288.955178] Bluetooth: hci4: command tx timeout [ 289.083362] Bluetooth: hci5: command tx timeout [ 289.084872] Bluetooth: hci7: command tx timeout [ 289.147199] Bluetooth: hci6: command tx timeout [ 342.706553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.716565] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.721434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.725359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.728004] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.735322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.880360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.904282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.907622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.915338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 342.916790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 342.922278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 342.922402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.925879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 342.926178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.927479] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 342.928472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 342.930347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.998645] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.002563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.008718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.009777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.012692] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.014246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.015301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.020037] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.026447] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.031467] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.035312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.051863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.123401] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.131308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.138132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.146341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.158513] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.165581] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.255748] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.261275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.265340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.272777] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.278317] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.279513] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.489890] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.505552] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.506577] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.509507] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.511344] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.512436] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.827558] Bluetooth: hci0: command tx timeout [ 344.955196] Bluetooth: hci1: command tx timeout [ 344.956005] Bluetooth: hci2: command tx timeout [ 345.083212] Bluetooth: hci3: command tx timeout [ 345.147202] Bluetooth: hci4: command tx timeout [ 345.275182] Bluetooth: hci5: command tx timeout [ 345.339198] Bluetooth: hci6: command tx timeout [ 345.531284] Bluetooth: hci7: command tx timeout [ 346.875207] Bluetooth: hci0: command tx timeout [ 347.003479] Bluetooth: hci1: command tx timeout [ 347.003991] Bluetooth: hci2: command tx timeout [ 347.131458] Bluetooth: hci3: command tx timeout [ 347.195233] Bluetooth: hci4: command tx timeout [ 347.323306] Bluetooth: hci5: command tx timeout [ 347.387711] Bluetooth: hci6: command tx timeout [ 347.579456] Bluetooth: hci7: command tx timeout [ 348.923147] Bluetooth: hci0: command tx timeout [ 349.051168] Bluetooth: hci2: command tx timeout [ 349.051687] Bluetooth: hci1: command tx timeout [ 349.179301] Bluetooth: hci3: command tx timeout [ 349.243251] Bluetooth: hci4: command tx timeout [ 349.371256] Bluetooth: hci5: command tx timeout [ 349.435172] Bluetooth: hci6: command tx timeout [ 349.627227] Bluetooth: hci7: command tx timeout [ 350.973123] Bluetooth: hci0: command tx timeout [ 351.099178] Bluetooth: hci1: command tx timeout [ 351.099690] Bluetooth: hci2: command tx timeout [ 351.227659] Bluetooth: hci3: command tx timeout [ 351.291253] Bluetooth: hci4: command tx timeout [ 351.419158] Bluetooth: hci5: command tx timeout [ 351.483144] Bluetooth: hci6: command tx timeout [ 351.679119] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 00:16:40 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=ffffed100593ef42 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000000040 RDI=ffff88802c9f7aa0 RBP=ffff888009406640 RSP=ffff88802c9f7a10 R8 =ffff88800ebcd6c0 R9 =0000000000000000 R10=ffff88800ebcd828 R11=0000000000000000 R12=0000000000000cc0 R13=0000000000000001 R14=0000000000000168 R15=0000000000000cc0 RIP=ffffffff813ef6b2 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555584caa400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa12c9db028 CR3=0000000009f3a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=000000000000000000000000ff000000 XMM02=0000000000ff00000000000000ff0000 XMM03=0000ff00000000000000000000ff0000 XMM04=00ff0000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000002bb2c RBX=0000000000000001 RCX=ffffffff81a9e1c1 RDX=000000000002bb2d RSI=000000000000a9e1 RDI=0000000000083184 RBP=ffff888034cd77c0 RSP=ffff888034cd76f8 R8 =ffffffff86868b70 R9 =ffff888034cd77a8 R10=000000000003c001 R11=000000000002bb2c R12=ffff888034cd77c8 R13=ffff888034cd77b0 R14=ffff888034cd77a9 R15=ffff888034cd7768 RIP=ffffffff811492fc RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb1cfee8c50 CR3=00000000132c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000