Warning: Permanently added '[localhost]:2744' (ECDSA) to the list of known hosts. 2025/01/06 01:36:32 fuzzer started 2025/01/06 01:36:32 dialing manager at localhost:34561 syzkaller login: [ 63.383839] cgroup: Unknown subsys name 'net' [ 63.496930] cgroup: Unknown subsys name 'cpuset' [ 63.531179] cgroup: Unknown subsys name 'rlimit' 2025/01/06 01:36:52 syscalls: 214 2025/01/06 01:36:52 code coverage: enabled 2025/01/06 01:36:52 comparison tracing: enabled 2025/01/06 01:36:52 extra coverage: enabled 2025/01/06 01:36:52 setuid sandbox: enabled 2025/01/06 01:36:52 namespace sandbox: enabled 2025/01/06 01:36:52 Android sandbox: enabled 2025/01/06 01:36:52 fault injection: enabled 2025/01/06 01:36:52 leak checking: enabled 2025/01/06 01:36:52 net packet injection: enabled 2025/01/06 01:36:52 net device setup: enabled 2025/01/06 01:36:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/06 01:36:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/06 01:36:52 USB emulation: enabled 2025/01/06 01:36:52 hci packet injection: enabled 2025/01/06 01:36:52 wifi device emulation: enabled 2025/01/06 01:36:52 802.15.4 emulation: enabled 2025/01/06 01:36:52 fetching corpus: 0, signal 0/0 (executing program) 2025/01/06 01:36:53 starting 8 fuzzer processes 01:36:53 executing program 0: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44004}, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x3}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24800}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x10) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x800) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x0, 0x320, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x1, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffff801}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0xa1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000007c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x30000100) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r6, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r7, 0x230, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008814}, 0x4000) 01:36:53 executing program 2: sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x5, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) r0 = socket(0x15, 0x1, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008080}, 0xc011) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000890}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008010}, 0x801) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x1a0, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x27}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xec, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_ID={0xc0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x384fef95}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9ffbe8c394e8077e4057e2b19e321dcbe8ec10563bf34a68de39190149678635"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c17d53d90ca52c605e58a1d1b0797d158b7256d8af2ac8b31f3418f26f978774"}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1c4, 0x2, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_NAT_SRC={0xe0, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x12}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xfffff801}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x10080}, 0x40080) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x68}}}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xa}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x81}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x15}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044811}, 0x4008084) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, r7, 0x1, 0x70bd2a, 0x4, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8014}, 0x4000000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3800}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffffe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 01:36:53 executing program 1: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x568}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x308079fe}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x287}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40000000}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x40001) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x1100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404a0}, 0x4000) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x4c, r0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x24008010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) r2 = syz_io_uring_complete(0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000780)={0x160, 0x0, 0x2, 0x201, 0x0, 0x0, {0xc, 0x0, 0x7}, [@CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xab}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3bf}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x14, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r0, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0xc1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x64, 0x0, 0x4, 0x9, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x38}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x90}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x80}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x18}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0xc0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040c0}, 0x2000c040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, r6, 0x404, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x4c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010100}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008040}, 0x4040) 01:36:53 executing program 3: r0 = io_uring_setup(0x7add, &(0x7f0000000000)={0x0, 0x6678, 0x20, 0x1, 0xa0}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r2 = syz_io_uring_complete(0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000080)=""/108) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r1) r3 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f0000000140)=""/219) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x8000) r5 = io_uring_setup(0x4557, &(0x7f0000000340)={0x0, 0x634, 0x4, 0x2, 0x130}) syz_io_uring_setup(0xfec, &(0x7f00000003c0)={0x0, 0xf4f4, 0x8, 0x1, 0xcc, 0x0, r5}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r6 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r6, 0xe, &(0x7f00000004c0)=""/75) pipe2(&(0x7f0000000540), 0x4000) 01:36:53 executing program 4: r0 = io_uring_setup(0x5ddc, &(0x7f0000000000)={0x0, 0xd266, 0x8, 0x0, 0x2b}) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r1) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4800) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000) io_setup(0xf3a1, &(0x7f0000000380)=0x0) io_submit(r7, 0x1, &(0x7f0000001400)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x3, 0x0, r4, &(0x7f00000003c0)="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", 0x1000, 0xffffffff7fffffff, 0x0, 0x2, r5}]) r8 = syz_io_uring_setup(0x3886, &(0x7f0000001440)={0x0, 0xdee3, 0x0, 0x0, 0x2a3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000014c0), &(0x7f0000001500)) syz_io_uring_setup(0x65fb, &(0x7f0000001540)={0x0, 0x176a, 0x8, 0x3, 0x1f2, 0x0, r8}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000015c0), &(0x7f0000001600)) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, r9, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}}, 0x800) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6a}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x19, 0x38}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x58}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4008014) [ 83.515203] audit: type=1400 audit(1736127413.513:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:36:53 executing program 5: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xc8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000801) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0x8080) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socketpair(0x23, 0x3, 0x2, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x1, 0x3, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10001}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, @NFQA_PAYLOAD={0x4}, @NFQA_VLAN={0x2c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8000}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x101}]}, @NFQA_EXP={0x14, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x408d0}, 0x4000800) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x1, 0x9, 0x301, 0x0, 0x0, {0xc, 0x0, 0x3}, [@NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9743a1f4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="33bf0f35bc2d"}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x2801}, 0x4800) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x3c, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000840), r2) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, r0, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r3, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}}, 0x40804) socketpair(0x10, 0x6, 0xffffff45, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b80)={0xe0, 0x0, 0x1, 0x101, 0x0, 0x0, {0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x18, 0x17, [0x3f, 0x3, 0x1c, 0x2a8, 0xe]}, @CTA_PROTOINFO={0x54, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x50, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xe1}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x80000000}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0xff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf7}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x8}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}]}}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8001}, 0xc4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000e00)={&(0x7f0000000d00), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 01:36:53 executing program 6: syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, &(0x7f0000000000)={0x20, 0x8, 0x5a, {0x5a, 0x23, "ccadea7c50786c367397a9177be22ccec8bfc2e4f1cc44d560cf198bd2860f331e49365275cd4a343388efb08d8ad4284c5fcd59abdcc7b203cce53e816fe06213800b4fb6ff387c5a4d4f667626945146b87c49a5e8d8ea"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}, &(0x7f00000000c0)={0x0, 0x22, 0x10, {[@global=@item_012={0x1, 0x1, 0x9, '$'}, @local=@item_012={0x2, 0x2, 0x98221056c83005a8, "c840"}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0xc, "6c6727bf"}, @main=@item_4={0x3, 0x0, 0xc, "7f5e8259"}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x6e4}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0x16, 0x52, "2cbf70b34e0e1803195dd62b5afb074cdff5bbad3dd92f769f62d7264fc1607aba8ab4679a532b51f5133e80ab6c2c842350b3f84bb5207366156b0665635c0046272347c633215974b292173375bb3676a0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x51}, &(0x7f0000000280)={0x20, 0x1, 0x8d, "0640b7c68c9255b4958f782ff7c7a0068edc40bb4d8129fbb42a3792d4f554399ff7a719773ef68d8c9c9d97ee325a745ad1d871908ecae816f23a8bc66754416f046cd246816930c7922bff2d311b08c8cc315a7d2d26b6ccd0469d950f6355500f90b543c8f609f07137c43e27c947367e60bbe302e64c75785e0e6513742063ad47a9bf1b6da0e1cdfce1fe"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0x17}}) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000003c0), 0x4) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000400)=0x800, 0x2) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x20040054) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000680)=0x3, &(0x7f00000006c0)=0x4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0xa0, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x400}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4802000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x80, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xffffff01}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r3 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1477, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x5, 0x7, {0x9, 0x21, 0x800, 0x7, 0x1, {0x22, 0xa86}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x0, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x81, 0x0, 0x7}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x101, 0x3f, 0x6, 0x0, 0x8, 0x7f}, 0x3a, &(0x7f0000000ac0)={0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x2, 0x400}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x0, 0x0, 0x9, 0x20}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x1000, 0xf000, 0x2, [0xff3f3f, 0x3f30, 0xff7ef0, 0xf]}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x9, 0xa, 0x45}]}}) syz_usb_control_io$hid(r3, &(0x7f0000000d80)={0x24, &(0x7f0000000b40)={0x40, 0x9, 0xca, {0xca, 0x23, "459e83a69ac6c2af00f39e3e33a62662509df4b4e21525f7dd40c7af85533f488683aedca726937d5f5091d9bea50ff74a0e8f07c56f54a7aca29e527df448f1274fc79352b325402d2812e388da7f4484bab3ecd29dde7e0790b2edd8e71f758a7cc1f5dda24f80b4b1b0540ded48198aa0b1b8fe54adc88677057876a53eeb31060424d16fb56b76df701cc9846e253867460bec96d264ba7e2487355a9a2aa81da497d05627fdef2fbdb94e7d711727a7c599a2f7abf828425ab694b3676b591129f2c25d9f50"}}, &(0x7f0000000c40)={0x0, 0x3, 0xb5, @string={0xb5, 0x3, "eeb1a5d5c2b9126f598456799aef8b94bc625aebd87b9ff29794af402d4e98cd997850e519ba30d27f84acd659d07d54e98f0f992ced35be5a643f93651c3f50022522fa7448b6a3a5b2bccfc8c5e6efb281c823f3dae7187ba9ef0fb0b359022b1b07d473cdf4775bf74673e20dc7a728d5d99dddfa7ee0dbef9aa96635ac21b99d675ab81f9f6abdeb845e8d3b31108cf968a0a1c2713295c2bce69f46d46d0966174a9fd1f8a68fcb5810a1392f59da7c5f"}}, &(0x7f0000000d00)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "5308d6ff"}]}}, &(0x7f0000000d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x401, 0x3f, 0x1, {0x22, 0x1d9}}}}, &(0x7f0000000f80)={0x2c, &(0x7f0000000dc0)={0x40, 0x9, 0x86, "9be94461ec8a6fde3660365c5739884ea5ee63e6343d4ab7bfedb27e6d497f4a49bf64d95ca44bef92a7204269383534a30ad469687e4eacfd937071e3f7910beeae8ce437a312c0e7d18f8c24c9ba08d7eadea4ddea29bb425dab505cf0897eedeea3a8a526b908e32a4ca71ad4dcf655b9912fe5ee3228455334759915bb2bacd0a134099a"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000f00)={0x20, 0x1, 0x2c, "0fc1c2cb8dba6c5466850bbd5139a60128f97dbab36455b5fc0b5ae305de5eba652c6ceb77fccb6ed736ee4a"}, &(0x7f0000000f40)={0x20, 0x3, 0x1, 0x8}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x28, r0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x24000000) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f00000010c0)=0x5, &(0x7f0000001100)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x34, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1ff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x800) 01:36:53 executing program 7: shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffffb) r0 = syz_io_uring_complete(0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000001000), &(0x7f0000001040)=0x4) r1 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000001080)=""/99) io_setup(0x6, &(0x7f0000001100)=0x0) r3 = epoll_create1(0x80000) io_cancel(r2, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x7, r3, &(0x7f0000001140)="9c87add10436bc223b7f2aa8b76aea40", 0x10, 0x9, 0x0, 0x2, r0}, &(0x7f00000011c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '*^\\--:\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010101}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x4008004) epoll_create(0x9) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001380), r4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x15541}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) syz_genetlink_get_family_id$nl802154(&(0x7f0000001500), r4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000015c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000016c0)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x880}, 0x0) [ 84.917151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.923116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.927451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.931057] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.934081] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.939522] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.944447] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.947398] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.949804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.954793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.958833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.960997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.964981] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.967384] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.967408] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.990475] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.002085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.008974] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.019102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.029715] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 85.035997] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.038094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.045800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 85.054909] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 85.063977] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.069055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.073002] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.073066] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 85.075014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 85.078448] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.083857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 85.084913] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.090834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 85.095139] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.095473] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 85.100002] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.102338] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 85.102467] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 85.107685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.110982] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 85.112909] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 85.124808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 85.130036] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 85.134796] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 85.134875] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 85.148949] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 85.157088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 85.165200] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.992733] Bluetooth: hci0: command tx timeout [ 87.056908] Bluetooth: hci2: command tx timeout [ 87.119769] Bluetooth: hci1: command tx timeout [ 87.184854] Bluetooth: hci7: command tx timeout [ 87.249412] Bluetooth: hci6: command tx timeout [ 87.250877] Bluetooth: hci4: command tx timeout [ 87.250925] Bluetooth: hci3: command tx timeout [ 87.311751] Bluetooth: hci5: command tx timeout [ 89.041602] Bluetooth: hci0: command tx timeout [ 89.103787] Bluetooth: hci2: command tx timeout [ 89.167680] Bluetooth: hci1: command tx timeout [ 89.231873] Bluetooth: hci7: command tx timeout [ 89.295812] Bluetooth: hci6: command tx timeout [ 89.295836] Bluetooth: hci4: command tx timeout [ 89.297061] Bluetooth: hci3: command tx timeout [ 89.359723] Bluetooth: hci5: command tx timeout [ 91.088627] Bluetooth: hci0: command tx timeout [ 91.152618] Bluetooth: hci2: command tx timeout [ 91.216640] Bluetooth: hci1: command tx timeout [ 91.281274] Bluetooth: hci7: command tx timeout [ 91.343625] Bluetooth: hci4: command tx timeout [ 91.343730] Bluetooth: hci6: command tx timeout [ 91.344663] Bluetooth: hci3: command tx timeout [ 91.407824] Bluetooth: hci5: command tx timeout [ 93.135598] Bluetooth: hci0: command tx timeout [ 93.200562] Bluetooth: hci2: command tx timeout [ 93.264741] Bluetooth: hci1: command tx timeout [ 93.328851] Bluetooth: hci7: command tx timeout [ 93.391675] Bluetooth: hci6: command tx timeout [ 93.392137] Bluetooth: hci3: command tx timeout [ 93.392615] Bluetooth: hci4: command tx timeout [ 93.490584] Bluetooth: hci5: command tx timeout [ 144.596082] syz-executor.4 (281) used greatest stack depth: 23536 bytes left [ 147.417282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.418667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.420881] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.424261] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.426611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.427979] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.494800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 147.497853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 147.499324] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 147.503094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 147.510913] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 147.512894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 147.550863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 147.552704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 147.559998] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 147.575618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 147.596651] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 147.597870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 147.632495] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.637257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.639985] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.666942] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.670493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.671935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.744829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.747641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.749922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.752021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.753332] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.756930] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.778361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 147.787401] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.788986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 147.796858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 147.799191] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.812907] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.857055] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 147.899447] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 147.920255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.921701] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.922086] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 147.953499] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 147.966956] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 147.967811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 147.976044] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 148.066615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 148.069246] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 148.073744] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 149.456633] Bluetooth: hci0: command tx timeout [ 149.584607] Bluetooth: hci1: command tx timeout [ 149.647786] Bluetooth: hci2: command tx timeout [ 149.775684] Bluetooth: hci3: command tx timeout [ 149.968623] Bluetooth: hci4: command tx timeout [ 150.033432] Bluetooth: hci5: command tx timeout [ 150.095620] Bluetooth: hci6: command tx timeout [ 150.160720] Bluetooth: hci7: command tx timeout [ 151.504623] Bluetooth: hci0: command tx timeout [ 151.632630] Bluetooth: hci1: command tx timeout [ 151.696601] Bluetooth: hci2: command tx timeout [ 151.824837] Bluetooth: hci3: command tx timeout [ 152.015698] Bluetooth: hci4: command tx timeout [ 152.082065] Bluetooth: hci5: command tx timeout [ 152.144605] Bluetooth: hci6: command tx timeout [ 152.207580] Bluetooth: hci7: command tx timeout [ 153.551594] Bluetooth: hci0: command tx timeout [ 153.679615] Bluetooth: hci1: command tx timeout [ 153.744605] Bluetooth: hci2: command tx timeout [ 153.871755] Bluetooth: hci3: command tx timeout [ 154.063671] Bluetooth: hci4: command tx timeout [ 154.127659] Bluetooth: hci5: command tx timeout [ 154.191614] Bluetooth: hci6: command tx timeout [ 154.257914] Bluetooth: hci7: command tx timeout [ 155.600702] Bluetooth: hci0: command tx timeout [ 155.729567] Bluetooth: hci1: command tx timeout [ 155.791578] Bluetooth: hci2: command tx timeout [ 155.919625] Bluetooth: hci3: command tx timeout [ 156.112748] Bluetooth: hci4: command tx timeout [ 156.176608] Bluetooth: hci5: command tx timeout [ 156.239683] Bluetooth: hci6: command tx timeout [ 156.305666] Bluetooth: hci7: command tx timeout [ 209.710410] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.715203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.717677] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.726264] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.734207] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.738388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.816117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.820017] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.824238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.833182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.837337] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.839409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.892919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.898782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.907196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.917881] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.925320] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.926986] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.079459] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.092298] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.115911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.154123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.173881] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.174098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.183985] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 210.184280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.192767] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.195456] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 210.204804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 210.206137] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.217701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 210.220230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 210.222689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 210.227081] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 210.230045] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 210.232077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 210.234262] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.237910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 210.240732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 210.253855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 210.256859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.267093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 210.271654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 210.281044] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.293137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.302846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 210.332874] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 210.349765] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.791852] Bluetooth: hci0: command tx timeout [ 211.856750] Bluetooth: hci1: command tx timeout [ 211.983614] Bluetooth: hci2: command tx timeout [ 212.303809] Bluetooth: hci5: command tx timeout [ 212.304454] Bluetooth: hci7: command tx timeout [ 212.367940] Bluetooth: hci3: command tx timeout [ 212.368748] Bluetooth: hci4: command tx timeout [ 212.432594] Bluetooth: hci6: command tx timeout [ 213.839601] Bluetooth: hci0: command tx timeout [ 213.903603] Bluetooth: hci1: command tx timeout [ 214.031580] Bluetooth: hci2: command tx timeout [ 214.351733] Bluetooth: hci7: command tx timeout [ 214.352240] Bluetooth: hci5: command tx timeout [ 214.415637] Bluetooth: hci3: command tx timeout [ 214.416117] Bluetooth: hci4: command tx timeout [ 214.479757] Bluetooth: hci6: command tx timeout [ 215.887753] Bluetooth: hci0: command tx timeout [ 215.951562] Bluetooth: hci1: command tx timeout [ 216.079635] Bluetooth: hci2: command tx timeout [ 216.399615] Bluetooth: hci5: command tx timeout [ 216.400115] Bluetooth: hci7: command tx timeout [ 216.463568] Bluetooth: hci4: command tx timeout [ 216.464013] Bluetooth: hci3: command tx timeout [ 216.527561] Bluetooth: hci6: command tx timeout [ 217.935649] Bluetooth: hci0: command tx timeout [ 217.999592] Bluetooth: hci1: command tx timeout [ 218.128538] Bluetooth: hci2: command tx timeout [ 218.447826] Bluetooth: hci5: command tx timeout [ 218.448334] Bluetooth: hci7: command tx timeout [ 218.511589] Bluetooth: hci3: command tx timeout [ 218.512072] Bluetooth: hci4: command tx timeout [ 218.575574] Bluetooth: hci6: command tx timeout [ 267.208920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.209988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.590389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.591178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.454412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.457462] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.463049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.472401] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.476225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.481089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.900671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.904461] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.907657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.913432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.917408] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.924120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.929899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.932791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.937055] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.942189] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.945001] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.949111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.114353] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.127344] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.134087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.167077] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.183197] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 272.198319] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.294935] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.317647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.323095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 272.328064] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 272.338644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 272.341955] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.343329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 272.349835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 272.355102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 272.358004] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 272.360077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 272.374756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 272.376458] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 272.387850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 272.387914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 272.398129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 272.401161] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 272.403212] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.405237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 272.412739] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 272.415625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.462015] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.496866] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.507093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.551662] Bluetooth: hci0: command tx timeout [ 273.999591] Bluetooth: hci2: command tx timeout [ 273.999627] Bluetooth: hci1: command tx timeout [ 274.258596] Bluetooth: hci3: command tx timeout [ 274.447661] Bluetooth: hci4: command tx timeout [ 274.525656] Bluetooth: hci5: command tx timeout [ 274.526553] Bluetooth: hci7: command tx timeout [ 274.576663] Bluetooth: hci6: command tx timeout [ 275.600612] Bluetooth: hci0: command tx timeout [ 276.047606] Bluetooth: hci1: command tx timeout [ 276.048616] Bluetooth: hci2: command tx timeout [ 276.303773] Bluetooth: hci3: command tx timeout [ 276.495579] Bluetooth: hci4: command tx timeout [ 276.559793] Bluetooth: hci5: command tx timeout [ 276.559871] Bluetooth: hci7: command tx timeout [ 276.623903] Bluetooth: hci6: command tx timeout [ 277.649599] Bluetooth: hci0: command tx timeout [ 278.096582] Bluetooth: hci2: command tx timeout [ 278.096618] Bluetooth: hci1: command tx timeout [ 278.351620] Bluetooth: hci3: command tx timeout [ 278.543655] Bluetooth: hci4: command tx timeout [ 278.607574] Bluetooth: hci5: command tx timeout [ 278.607630] Bluetooth: hci7: command tx timeout [ 278.671835] Bluetooth: hci6: command tx timeout [ 279.695586] Bluetooth: hci0: command tx timeout [ 280.144647] Bluetooth: hci1: command tx timeout [ 280.144689] Bluetooth: hci2: command tx timeout [ 280.399570] Bluetooth: hci3: command tx timeout [ 280.592521] Bluetooth: hci4: command tx timeout [ 280.655556] Bluetooth: hci5: command tx timeout [ 280.656565] Bluetooth: hci7: command tx timeout [ 280.719557] Bluetooth: hci6: command tx timeout [ 334.052561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 334.055938] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 334.061403] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 334.068381] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 334.073874] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 334.076053] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 334.248184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.254096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.257328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.263895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.269909] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.272189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.614932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.619300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.621016] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.627180] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.630804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.633342] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.686866] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.690726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.693758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.696192] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.697657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 334.700783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.747409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 334.754599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 334.759854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 334.766703] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 334.769794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 334.770709] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 334.785726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 334.785983] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 334.788266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 334.789206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 334.797381] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 334.798522] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 334.805895] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 334.821084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 334.824426] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 334.828011] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 334.835258] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 334.840676] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 334.845911] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 334.847953] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 334.848834] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 334.851765] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 334.872652] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 334.873645] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.144557] Bluetooth: hci0: command tx timeout [ 336.336534] Bluetooth: hci1: command tx timeout [ 336.659394] Bluetooth: hci2: command tx timeout [ 336.784216] Bluetooth: hci3: command tx timeout [ 336.847583] Bluetooth: hci4: command tx timeout [ 336.848824] Bluetooth: hci5: command tx timeout [ 336.975750] Bluetooth: hci6: command tx timeout [ 336.976390] Bluetooth: hci7: command tx timeout [ 338.191607] Bluetooth: hci0: command tx timeout [ 338.384650] Bluetooth: hci1: command tx timeout [ 338.704812] Bluetooth: hci2: command tx timeout [ 338.832640] Bluetooth: hci3: command tx timeout [ 338.896541] Bluetooth: hci5: command tx timeout [ 338.897394] Bluetooth: hci4: command tx timeout [ 339.024580] Bluetooth: hci7: command tx timeout [ 339.025165] Bluetooth: hci6: command tx timeout [ 340.239589] Bluetooth: hci0: command tx timeout [ 340.431884] Bluetooth: hci1: command tx timeout [ 340.752593] Bluetooth: hci2: command tx timeout [ 340.879593] Bluetooth: hci3: command tx timeout [ 340.944546] Bluetooth: hci4: command tx timeout [ 340.945118] Bluetooth: hci5: command tx timeout [ 341.071754] Bluetooth: hci6: command tx timeout [ 341.072261] Bluetooth: hci7: command tx timeout [ 342.288606] Bluetooth: hci0: command tx timeout [ 342.480789] Bluetooth: hci1: command tx timeout [ 342.799541] Bluetooth: hci2: command tx timeout [ 342.928537] Bluetooth: hci3: command tx timeout [ 342.992405] Bluetooth: hci5: command tx timeout [ 342.992950] Bluetooth: hci4: command tx timeout [ 343.119767] Bluetooth: hci7: command tx timeout [ 343.120229] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 01:42:01 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888013da3dc0 RCX=ffffffff82215894 RDX=ffff888023a5d340 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000002 RSP=ffff88803474f940 R8 =0000000000000000 R9 =ffffed1001230a67 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=1ffff110068e9f2a R14=ffff888013da3e28 R15=0000000000000001 RIP=ffffffff8171c950 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f467cc006c0 CR3=000000002333a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=1ffff11005a6cf4a RCX=ffffffff81503e2e RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=ffffffff863fda34 RSP=ffff88802d367a40 R8 =0000000000000000 R9 =fffffbfff0c7f992 R10=ffffffff863fcc97 R11=0000000000000000 R12=ffffffff85c16c40 R13=ffffffff818a3afe R14=000000000003a70c R15=ffff88802d367d98 RIP=ffffffff81503e58 RFL=00000213 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f70d57fd790 CR3=000000001653c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000