Warning: Permanently added '[localhost]:16463' (ECDSA) to the list of known hosts. 2025/05/31 17:51:09 fuzzer started 2025/05/31 17:51:10 dialing manager at localhost:34361 syzkaller login: [ 109.706599] cgroup: Unknown subsys name 'net' [ 109.816532] cgroup: Unknown subsys name 'cpuset' [ 109.857718] cgroup: Unknown subsys name 'rlimit' 2025/05/31 17:51:34 syscalls: 203 2025/05/31 17:51:34 code coverage: enabled 2025/05/31 17:51:34 comparison tracing: enabled 2025/05/31 17:51:34 extra coverage: enabled 2025/05/31 17:51:34 setuid sandbox: enabled 2025/05/31 17:51:34 namespace sandbox: enabled 2025/05/31 17:51:34 Android sandbox: enabled 2025/05/31 17:51:34 fault injection: enabled 2025/05/31 17:51:34 leak checking: enabled 2025/05/31 17:51:34 net packet injection: enabled 2025/05/31 17:51:34 net device setup: enabled 2025/05/31 17:51:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 17:51:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 17:51:34 USB emulation: enabled 2025/05/31 17:51:34 hci packet injection: enabled 2025/05/31 17:51:34 wifi device emulation: enabled 2025/05/31 17:51:34 802.15.4 emulation: enabled 2025/05/31 17:51:34 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 17:51:35 starting 8 fuzzer processes 17:51:35 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001580)={&(0x7f0000000040), 0x6e, &(0x7f0000001400)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/150, 0x96}, {&(0x7f00000001c0)=""/216, 0xd8}, {&(0x7f00000002c0)=""/6, 0x6}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x6, &(0x7f0000001480)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x1) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000015c0)) ioctl$SG_SET_RESERVED_SIZE(r7, 0x2275, &(0x7f0000001600)=0x8) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000001640)) r9 = syz_open_dev$vcsu(&(0x7f0000001680), 0xffffffffb5082fc0, 0x200400) ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r8, 0x5381) ioctl$SG_SET_COMMAND_Q(r3, 0x2271, &(0x7f00000016c0)=0x1) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001700), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001740)={0x0, 0x1, r10, 0x7ff, 0x80000}) ioctl$SCSI_IOCTL_GET_IDLUN(r9, 0x5382, &(0x7f0000001780)) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000017c0), 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000001800)) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000001840)={'batadv_slave_0\x00'}) ioctl$RNDZAPENTCNT(r11, 0x5204, &(0x7f0000001880)=0x3) clock_gettime(0x0, &(0x7f0000005a80)={0x0, 0x0}) recvmmsg$unix(r5, &(0x7f0000005900)=[{{&(0x7f00000018c0)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f0000001940)=""/29, 0x1d}, {&(0x7f0000001980)=""/211, 0xd3}], 0x2}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000002040)=[{&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/226, 0xe2}, {&(0x7f0000001c80)=""/50, 0x32}, {&(0x7f0000001cc0)=""/169, 0xa9}, {&(0x7f0000001d80)=""/50, 0x32}, {&(0x7f0000001dc0)=""/42, 0x2a}, {&(0x7f0000001e00)=""/230, 0xe6}, {&(0x7f0000001f00)=""/111, 0x6f}, {&(0x7f0000001f80)=""/139, 0x8b}], 0x9, &(0x7f0000002100)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000002200), 0x6e, &(0x7f0000003340)=[{&(0x7f0000002280)=""/6, 0x6}, {&(0x7f00000022c0)=""/100, 0x64}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000003380)=@abs, 0x6e, &(0x7f0000003600)=[{&(0x7f0000003400)=""/145, 0x91}, {&(0x7f00000034c0)=""/34, 0x22}, {&(0x7f0000003500)=""/194, 0xc2}], 0x3, &(0x7f0000003640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f00000047c0)=[{&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/35, 0x23}, {&(0x7f0000004700)=""/152, 0x98}], 0x3, &(0x7f0000004800)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000004840)=@abs, 0x6e, &(0x7f00000058c0)=[{&(0x7f00000048c0)=""/4096, 0x1000}], 0x1}}], 0x6, 0x40012000, &(0x7f0000005ac0)={r13, r14+10000000}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x2010, r15, 0x8000000) 17:51:35 executing program 2: r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4ce40, 0x0) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000040)={0x8, 0x80, 0x0, 0x2, 0x7f, 0x9}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000b00)={0x0, 0x1ff, 0xffffffff}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b40), 0x40000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000b80)=0x7ff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000bc0), 0xbd775d3646225f19, 0x0) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f0000000c00)) r3 = syz_open_dev$vcsu(&(0x7f0000000c40), 0xf83, 0x0) r4 = socket(0xf, 0x80000, 0x60) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x34, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7753899c}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20000844) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000dc0)={0x4, &(0x7f0000000d80)=[{0x1000, 0xff, 0x0, 0x7}, {0x3, 0x0, 0x0, 0x8}, {0x2, 0x80, 0x3, 0x4}, {0x4, 0x0, 0x3f, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000e00)) semget$private(0x0, 0x0, 0x102) recvmmsg$unix(r3, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000e80)=""/20, 0x14}, {&(0x7f0000000ec0)=""/48, 0x30}, {&(0x7f0000000f00)=""/229, 0xe5}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/230, 0xe6}, {&(0x7f0000002100)=""/228, 0xe4}, {&(0x7f0000002200)=""/30, 0x1e}, {&(0x7f0000002240)=""/173, 0xad}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002440), 0x6e, &(0x7f0000002600)=[{&(0x7f00000024c0)=""/151, 0x97}, {&(0x7f0000002580)=""/48, 0x30}, {&(0x7f00000025c0)=""/28, 0x1c}], 0x3}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f00000026c0)=""/78, 0x4e}], 0x1, &(0x7f0000002780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}], 0x1, &(0x7f0000003800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}], 0x4, 0x22, &(0x7f0000003980)) write$rfkill(r9, &(0x7f00000039c0)={0x4, 0x4, 0x0, 0x1, 0x1}, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000003a00)={@loopback, 0x73}) ioctl$CDROM_SELECT_DISK(r7, 0x5322, 0x1000) syz_io_uring_setup(0x2d0f, &(0x7f0000003a40)={0x0, 0x33ad, 0x8, 0x1, 0x89, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000003ac0), &(0x7f0000003b00)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000003b40)=@IORING_OP_NOP={0x0, 0x5}, 0x101) 17:51:35 executing program 1: ioctl$CDROMREADMODE2(0xffffffffffffffff, 0x530c, &(0x7f0000000000)={0x40, 0x7, 0x10, 0x4, 0xf8, 0x8}) ioctl$CDROMREADRAW(0xffffffffffffffff, 0x5314, &(0x7f0000000a80)={0x20, 0x7f, 0x9, 0x66, 0x9, 0x6}) syz_genetlink_get_family_id$wireguard(&(0x7f0000001500), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001540), 0x24042, 0x0) ioctl$CDROMREADMODE2(r0, 0x530c, &(0x7f0000001580)={0x1, 0x1, 0x9, 0xde, 0x2, 0xe7}) munlockall() ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000002000)=""/59) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000002040), 0x28000, 0x0) ioctl$CDROM_GET_CAPABILITY(r1, 0x5331) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000002080)) ioctl$CDROM_SELECT_DISK(0xffffffffffffffff, 0x5322, 0x1ff) ioctl$CDROMEJECT_SW(r0, 0x530f, 0x1) recvmmsg$unix(r0, &(0x7f0000002e00)=[{{&(0x7f00000020c0)=@abs, 0x6e, &(0x7f0000002240)=[{&(0x7f0000002140)=""/176, 0xb0}, {&(0x7f0000002200)=""/38, 0x26}], 0x2}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000002300)=""/56, 0x38}, {&(0x7f0000002340)=""/152, 0x98}, {&(0x7f0000002400)=""/13, 0xd}, {&(0x7f0000002440)=""/103, 0x67}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/203, 0xcb}, {&(0x7f0000002600)=""/19, 0x13}], 0x8, &(0x7f00000026c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000002880)=[{&(0x7f0000002780)=""/137, 0x89}, {&(0x7f0000002840)}], 0x2}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002940)=""/238, 0xee}, {&(0x7f0000002a40)=""/22, 0x16}, {&(0x7f0000002a80)=""/101, 0x65}, {&(0x7f0000002b00)=""/18, 0x12}, {&(0x7f0000002b40)=""/61, 0x3d}], 0x5, &(0x7f0000002c00)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002cc0), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000002d40)=""/66, 0x42}], 0x1}}], 0x5, 0x2002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002f40)) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002fc0), 0x8000, 0x0) ioctl$CDROM_SELECT_DISK(r5, 0x5322, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004000)={0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004340)={0xbc, 0x0, &(0x7f0000004200)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000004040)={@fda={0x66646185, 0x1, 0x1, 0x3f}, @ptr={0x70742a85, 0x0, &(0x7f0000003000)=""/4096, 0x1000, 0x2, 0xb}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000040c0)={0x0, 0x20, 0x48}}, 0x40}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x58, 0x18, &(0x7f0000004140)={@fda={0x66646185, 0x0, 0x0, 0x10}, @fda={0x66646185, 0x0, 0x1, 0x2}, @fd}, &(0x7f00000041c0)={0x0, 0x20, 0x40}}}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x1}, @enter_looper], 0x71, 0x0, &(0x7f00000042c0)="c42799e25dab43664479735bd33a696c492dd3a7f927485bc40f0e92ec3eefa083266c93aeafe9e407f6011fb21256be954f6384a0eb3996879629305c4926b29331d4cbaaa2fce3ecc9d7683dbdc4bbafa5403aef94e851d1431173c31c9804e997dc9268bbbe8faea718cb327feca6a5"}) 17:51:35 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x2007, @fd_index=0x4, 0xfff, 0x8, 0x9, 0xc, 0x1, {0x3}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0xfe, 0xdb, 0x4, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x80, 0x8000, 0x56, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', r0, 0x29, 0x4, 0x80, 0xbc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x7800, 0x0, 0x7f, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', r0, 0x2f, 0x4, 0x7, 0xffff, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, 0x1, 0x7, 0x5, 0x400}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x2f, 0xda, 0x1, 0x3, 0xce5607160edcc04d, @private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x40, 0x7, 0x100}}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000480)={'tunl0\x00', &(0x7f00000003c0)={'syztnl2\x00', r3, 0x1, 0x1, 0x0, 0x7, {{0x25, 0x4, 0x1, 0x1, 0x94, 0x68, 0x0, 0x0, 0x2f, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0xf, 0xd3, [@multicast1, @local, @remote]}, @noop, @timestamp_prespec={0x44, 0xc, 0xb8, 0x3, 0x4, [{@rand_addr=0x64010100, 0x81}]}, @lsrr={0x83, 0x1b, 0x40, [@private=0xa010101, @broadcast, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x1c, 0x6e, 0x1, 0x9, [{@broadcast, 0x8}, {@loopback, 0xbb2}, {@local}]}, @timestamp_addr={0x44, 0x2c, 0xc3, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast1, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x9}, 0x4}, {@multicast2, 0x2}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000540)={'sit0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', r1, 0x29, 0xff, 0x0, 0xf4, 0x62, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7, 0x700, 0x3, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'syztnl2\x00', r4, 0x2f, 0x3, 0x4a, 0x8, 0x2, @loopback, @empty, 0x40, 0x7800, 0x7}}) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000640)) r5 = syz_open_dev$vcsu(&(0x7f0000000680), 0x9, 0x10000) bind$packet(r5, &(0x7f00000006c0)={0x11, 0xf6, r0, 0x1, 0x0, 0x6, @random="a920a12440d6"}, 0x14) socketpair(0x1d, 0x6, 0x6, &(0x7f0000000700)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', r0, 0x0, 0x2, 0xb3, 0x5, 0x10, @mcast2, @local, 0x7, 0x18, 0x8, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000880)={'ip6gre0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x4, 0x9, 0xf, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x0, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000940)={'syztnl2\x00', &(0x7f00000008c0)={'sit0\x00', r3, 0x29, 0x8, 0x1, 0xdfe, 0x71, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x700, 0x1000, 0x2}}) r7 = syz_open_dev$vcsu(&(0x7f0000000980), 0x1, 0x40000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000009c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000a40)={r8, 0x6, 0xffffffffffffffff, 0x1f, 0x80000}) [ 134.899398] audit: type=1400 audit(1748713895.470:7): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:51:35 executing program 5: sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x840}, 0x40) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x4, 0xfff, 0x10, @private2, @empty, 0x700, 0x8041, 0x2, 0x200}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', r0, 0x2f, 0x8, 0x2, 0x1f, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, 0x8, 0x7800, 0x6252a1e7, 0xffffffff}}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl0\x00', r2, 0x4, 0x8, 0x7, 0x2, 0x1, @private0, @mcast1, 0x8, 0xc01d926bd0ee553b, 0x0, 0xf429}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', r4, 0x2f, 0x70, 0x20, 0x1, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0x5}, 0x8, 0x0, 0xfffffffe, 0x7}}) ioctl$CDROMREADRAW(r1, 0x5314, &(0x7f0000000500)={0xf8, 0x4, 0x8, 0x20, 0x3}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000001040)={'syztnl0\x00', &(0x7f0000000fc0)={'ip6gre0\x00', r5, 0x29, 0x7, 0x7, 0x101, 0x1c, @empty, @mcast1, 0x10, 0x8000, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000001100)={'ip6gre0\x00', &(0x7f0000001080)={'ip6_vti0\x00', r0, 0x4, 0x4, 0x2, 0x0, 0x10, @empty, @local, 0x80, 0x1, 0x80000001, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000011c0)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000001440)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001200)={0x1dc, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001540), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001600)={'ip6gre0\x00', &(0x7f0000001580)={'syztnl1\x00', r10, 0x2f, 0x1, 0x7c, 0x9, 0x8, @mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x1, 0x49, 0x4000, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000016c0)={'syztnl0\x00', &(0x7f0000001640)={'syztnl0\x00', r6, 0x2f, 0x0, 0x0, 0xfe000000, 0x48, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, 0x80, 0x10, 0x4, 0x401}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001780)={'ip6gre0\x00', &(0x7f0000001700)={'ip6tnl0\x00', r10, 0x29, 0x9, 0x9, 0x8001, 0x1, @private1, @loopback, 0x20, 0x40, 0x740, 0x44}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r11, &(0x7f0000001b80)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001880)={0x2c0, r12, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 17:51:35 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan3\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x15c, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0xa8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x10000}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40850}, 0x4000041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000018}, 0x80) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r2) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffff46a}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x408, 0x100, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r3, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd4, 0x0, 0xe9c9f9cb00fd722, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xb0, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1001e}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x48, r6, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x19}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x60, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c805) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f0000000c00)=@abs, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/102, 0x66}, {&(0x7f0000000d00)=""/148, 0x94}, {&(0x7f0000000dc0)=""/9, 0x9}, {&(0x7f0000000e00)=""/14, 0xe}, {&(0x7f0000000e40)=""/255, 0xff}], 0x5, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}], 0x1, 0x0, 0x0) getgroups(0x3, &(0x7f00000010c0)=[0xee01, 0xee00, 0x0]) getgroups(0x1, &(0x7f0000001100)=[0xee00]) getgroups(0x7, &(0x7f0000001140)=[0x0, r7, 0x0, r8, 0x0, 0xffffffffffffffff, r9]) 17:51:35 executing program 6: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x40010) r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000280), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0xc02000, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000840)={0x144, 0x0, &(0x7f0000000600)=[@dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x1, 0x1, 0x1f}, @fda={0x66646185, 0x1, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x101, 0x1}}, &(0x7f00000001c0)={0x0, 0x20, 0x40}}}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/89, 0x59, 0x0, 0x3e}, @flat=@weak_binder={0x77622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x1000}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@fda={0x66646185, 0xa, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/185, 0xb9, 0x2, 0x27}, @fd}, &(0x7f00000005c0)={0x0, 0x20, 0x48}}}, @release], 0xac, 0x0, &(0x7f0000000780)="4a7ee8655182dd6a254787d22c06074c2a354d6c393d6b38aecece40234ca41968c76c4536153c47715a692b45b603d311f0d8d28fcb6fa4c52784a0e68b48d9c18fbee33b08fc85a083796c67a3b8b4ec13ec51318e458362b340436a362d6cad39c49140f78bd602abb6250c67b9202b9e90a108f88fffc92912752d9ee52101fed628c3fe30f5b5d93201380874064cd292d9ca5c024a13bf3b3d866107cb8fe9a69e852fad58594a7b29"}) setgid(0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000880), 0x340, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000008c0)=0x3) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x29, 0x4, 0xf, 0x9, 0x1, @local, @remote, 0x1, 0x20, 0x1, 0x5}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x800, 0x0) r4 = epoll_create1(0x80000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001f80)={0xf4, 0x0, &(0x7f0000001e00)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000a00)={@flat=@binder={0x73622a85, 0x100, 0x1}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_handle={0x77682a85, 0x1, 0x2}}, &(0x7f0000000a80)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000001bc0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000ac0)=""/4096, 0x1000, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000001ac0)=""/194, 0xc2, 0x2, 0x22}}, &(0x7f0000001c40)={0x0, 0x18, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001d40)={@flat=@weak_binder, @ptr={0x70742a85, 0x1, &(0x7f0000001c80)=""/157, 0x9d, 0x1, 0x22}, @flat=@weak_binder={0x77622a85, 0x900, 0x1}}, &(0x7f0000001dc0)={0x0, 0x18, 0x40}}, 0x400}], 0x6f, 0x0, &(0x7f0000001f00)="7c63b3d8658b40e20a1e63d2c306695d8038a2c38ddf4d241f6982b0673df82bc0f53f3700b4170571abebd01f92bc3ee1cadd210aae7c82fb394f42e6a58382e0765868006b4d84452b2692b9428d013a8e016cc6391cd77649219c045085c0f0db01208d9d9c8dcdf973e0fd8b10"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000002140)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002100)={&(0x7f0000002000)={0xdc, 0x0, 0x0, 0x70bd25, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x90, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xdc}, 0x1, 0x0, 0x0, 0x801}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)={0x54, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000024c0)={'ip6_vti0\x00', &(0x7f0000002440)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x3, 0x9, 0x1, @private0, @mcast1, 0x1, 0x40, 0x3}}) 17:51:35 executing program 7: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x76}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x5}]}, 0x8c}}, 0x20000000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x200}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r5, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x4031) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x8080) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f00000006c0), 0x80, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000a80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000880)={0x198, r8, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xf4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ceb8e7659ba744593c789a951c3af550"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xdd}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ba89fde207cb10ac76a04cf2e4a79a3f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "56997df09f80de84d08fbd2faace1a4baa4869f8225faeb0d5ddacc96fbe1632"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9f}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x70, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xbdff}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9860ff2a76843e1215b87a98f587e239806d2db51e2ea1a9fac9d3ed331f6227"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "73285810c0e89b956ef16421f31d6970"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1e}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x8080) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x30000100}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xf1cc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x841) [ 136.153292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.156556] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.159159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.167302] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.172954] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.215794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.218222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.220345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.225251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.229302] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.269654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.272874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.274987] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.280525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.283585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.402733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 136.409223] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 136.411320] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 136.413701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 136.419210] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 136.422980] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 136.425054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 136.431027] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 136.456031] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 136.462809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 136.489161] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 136.512408] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 136.516223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 136.550210] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 136.552076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 136.575393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 136.578078] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 136.594137] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 136.620133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 136.633579] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 136.635059] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.673263] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.678510] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.737573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.751232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 138.239700] Bluetooth: hci0: command tx timeout [ 138.302715] Bluetooth: hci2: command tx timeout [ 138.303385] Bluetooth: hci1: command tx timeout [ 138.495825] Bluetooth: hci3: command tx timeout [ 138.557878] Bluetooth: hci4: command tx timeout [ 138.685900] Bluetooth: hci5: command tx timeout [ 138.815799] Bluetooth: hci6: command tx timeout [ 138.942100] Bluetooth: hci7: command tx timeout [ 140.285868] Bluetooth: hci0: command tx timeout [ 140.350042] Bluetooth: hci2: command tx timeout [ 140.351628] Bluetooth: hci1: command tx timeout [ 140.542931] Bluetooth: hci3: command tx timeout [ 140.606842] Bluetooth: hci4: command tx timeout [ 140.734801] Bluetooth: hci5: command tx timeout [ 140.863197] Bluetooth: hci6: command tx timeout [ 140.991837] Bluetooth: hci7: command tx timeout [ 142.334851] Bluetooth: hci0: command tx timeout [ 142.398832] Bluetooth: hci1: command tx timeout [ 142.399009] Bluetooth: hci2: command tx timeout [ 142.589836] Bluetooth: hci3: command tx timeout [ 142.655824] Bluetooth: hci4: command tx timeout [ 142.783102] Bluetooth: hci5: command tx timeout [ 142.910841] Bluetooth: hci6: command tx timeout [ 143.040782] Bluetooth: hci7: command tx timeout [ 144.382053] Bluetooth: hci0: command tx timeout [ 144.447851] Bluetooth: hci1: command tx timeout [ 144.448309] Bluetooth: hci2: command tx timeout [ 144.639366] Bluetooth: hci3: command tx timeout [ 144.703403] Bluetooth: hci4: command tx timeout [ 144.829872] Bluetooth: hci5: command tx timeout [ 144.958679] Bluetooth: hci6: command tx timeout [ 145.086161] Bluetooth: hci7: command tx timeout [ 198.929123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.932496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.941383] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.953231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.958545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.002855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.009400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.012263] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.014317] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.021999] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.027698] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.030466] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.035923] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.047528] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.053623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.129093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.135353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.138359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.142224] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.145573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.147343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.149070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.151450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.159155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.160547] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.160589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.165022] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.167112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.187928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.200252] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.205248] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 199.210581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 199.238887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 199.245450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 199.269068] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 199.351437] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 199.387926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 199.447098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 199.457332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 199.526364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 201.022917] Bluetooth: hci0: command tx timeout [ 201.085933] Bluetooth: hci1: command tx timeout [ 201.150291] Bluetooth: hci2: command tx timeout [ 201.278470] Bluetooth: hci3: command tx timeout [ 201.280010] Bluetooth: hci4: command tx timeout [ 201.343213] Bluetooth: hci5: command tx timeout [ 201.406461] Bluetooth: hci6: command tx timeout [ 201.598227] Bluetooth: hci7: command tx timeout [ 203.070188] Bluetooth: hci0: command tx timeout [ 203.134016] Bluetooth: hci1: command tx timeout [ 203.198206] Bluetooth: hci2: command tx timeout [ 203.326193] Bluetooth: hci4: command tx timeout [ 203.327172] Bluetooth: hci3: command tx timeout [ 203.390839] Bluetooth: hci5: command tx timeout [ 203.455547] Bluetooth: hci6: command tx timeout [ 203.647288] Bluetooth: hci7: command tx timeout [ 205.118080] Bluetooth: hci0: command tx timeout [ 205.181853] Bluetooth: hci1: command tx timeout [ 205.245944] Bluetooth: hci2: command tx timeout [ 205.373868] Bluetooth: hci3: command tx timeout [ 205.374378] Bluetooth: hci4: command tx timeout [ 205.438056] Bluetooth: hci5: command tx timeout [ 205.501885] Bluetooth: hci6: command tx timeout [ 205.694315] Bluetooth: hci7: command tx timeout [ 207.166008] Bluetooth: hci0: command tx timeout [ 207.231435] Bluetooth: hci1: command tx timeout [ 207.294005] Bluetooth: hci2: command tx timeout [ 207.423413] Bluetooth: hci4: command tx timeout [ 207.424323] Bluetooth: hci3: command tx timeout [ 207.485952] Bluetooth: hci5: command tx timeout [ 207.549862] Bluetooth: hci6: command tx timeout [ 207.742464] Bluetooth: hci7: command tx timeout [ 260.753067] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 260.760640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 260.765002] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 260.779478] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 260.787716] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 260.997435] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 261.001054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 261.005309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 261.010523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 261.015521] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.072250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 261.076546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 261.078137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 261.087703] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 261.093378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 261.152031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 261.160678] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.169481] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.174181] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 261.174563] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.181150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 261.181962] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.188305] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.212166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 261.214533] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.217448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.221509] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 261.228948] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.232181] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.239897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.240962] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.247197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.252941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 261.320982] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 261.329633] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 261.334183] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 261.341160] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 261.345299] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 261.357719] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 261.375252] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 262.847029] Bluetooth: hci0: command tx timeout [ 263.039789] Bluetooth: hci1: command tx timeout [ 263.165988] Bluetooth: hci2: command tx timeout [ 263.294304] Bluetooth: hci3: command tx timeout [ 263.358065] Bluetooth: hci5: command tx timeout [ 263.358608] Bluetooth: hci4: command tx timeout [ 263.422013] Bluetooth: hci7: command tx timeout [ 263.422574] Bluetooth: hci6: command tx timeout [ 264.895173] Bluetooth: hci0: command tx timeout [ 265.087199] Bluetooth: hci1: command tx timeout [ 265.215852] Bluetooth: hci2: command tx timeout [ 265.341985] Bluetooth: hci3: command tx timeout [ 265.407180] Bluetooth: hci5: command tx timeout [ 265.407617] Bluetooth: hci4: command tx timeout [ 265.470882] Bluetooth: hci6: command tx timeout [ 265.471349] Bluetooth: hci7: command tx timeout [ 266.943016] Bluetooth: hci0: command tx timeout [ 267.134868] Bluetooth: hci1: command tx timeout [ 267.263220] Bluetooth: hci2: command tx timeout [ 267.390844] Bluetooth: hci3: command tx timeout [ 267.454813] Bluetooth: hci5: command tx timeout [ 267.455261] Bluetooth: hci4: command tx timeout [ 267.518828] Bluetooth: hci7: command tx timeout [ 267.519274] Bluetooth: hci6: command tx timeout [ 268.990481] Bluetooth: hci0: command tx timeout [ 269.182766] Bluetooth: hci1: command tx timeout [ 269.309804] Bluetooth: hci2: command tx timeout [ 269.438818] Bluetooth: hci3: command tx timeout [ 269.503995] Bluetooth: hci4: command tx timeout [ 269.504433] Bluetooth: hci5: command tx timeout [ 269.567295] Bluetooth: hci6: command tx timeout [ 269.568958] Bluetooth: hci7: command tx timeout [ 323.164877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.169834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.171543] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.183141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.192658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.406994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 323.411032] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 323.413672] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 323.427255] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 323.437274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 323.506589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 323.517333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.530183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.567850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 323.570850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 323.572883] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.573096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 323.576107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.598789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.632810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.634253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.635943] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.642083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 323.642126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.646673] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.650044] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 323.651352] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.657056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.664251] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.666689] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 323.670484] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 323.675686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 323.679444] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 323.683102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 323.712302] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.716600] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.726260] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.745558] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.813170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.832040] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.245972] Bluetooth: hci0: command tx timeout [ 325.503226] Bluetooth: hci1: command tx timeout [ 325.631014] Bluetooth: hci2: command tx timeout [ 325.758859] Bluetooth: hci7: command tx timeout [ 325.822827] Bluetooth: hci4: command tx timeout [ 325.823400] Bluetooth: hci5: command tx timeout [ 325.887089] Bluetooth: hci3: command tx timeout [ 326.013836] Bluetooth: hci6: command tx timeout [ 327.295814] Bluetooth: hci0: command tx timeout [ 327.549818] Bluetooth: hci1: command tx timeout [ 327.677815] Bluetooth: hci2: command tx timeout [ 327.806505] Bluetooth: hci7: command tx timeout [ 327.870619] Bluetooth: hci4: command tx timeout [ 327.872904] Bluetooth: hci5: command tx timeout [ 327.933918] Bluetooth: hci3: command tx timeout [ 328.061897] Bluetooth: hci6: command tx timeout [ 329.341871] Bluetooth: hci0: command tx timeout [ 329.598080] Bluetooth: hci1: command tx timeout [ 329.727196] Bluetooth: hci2: command tx timeout [ 329.853848] Bluetooth: hci7: command tx timeout [ 329.917871] Bluetooth: hci4: command tx timeout [ 329.918505] Bluetooth: hci5: command tx timeout [ 329.981836] Bluetooth: hci3: command tx timeout [ 330.111792] Bluetooth: hci6: command tx timeout [ 331.390184] Bluetooth: hci0: command tx timeout [ 331.646328] Bluetooth: hci1: command tx timeout [ 331.774566] Bluetooth: hci2: command tx timeout [ 331.901862] Bluetooth: hci7: command tx timeout [ 331.965964] Bluetooth: hci4: command tx timeout [ 331.966724] Bluetooth: hci5: command tx timeout [ 332.029840] Bluetooth: hci3: command tx timeout [ 332.158125] Bluetooth: hci6: command tx timeout [ 385.688993] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.694356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.697802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.707030] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.714122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.874358] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.877906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.880279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.893236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.898319] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.011847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 386.023056] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 386.025659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 386.029576] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 386.037471] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 386.041635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 386.052382] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.059455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.072516] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.079479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.320954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.325428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.339087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.378112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.403276] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.587394] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.591016] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.593869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 386.596679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 386.609950] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 386.639242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 386.641439] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 386.645860] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 386.656075] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 386.663219] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 386.668327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 386.672567] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 386.674791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 386.687220] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 386.692374] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.773812] Bluetooth: hci0: command tx timeout [ 387.966176] Bluetooth: hci1: command tx timeout [ 388.094978] Bluetooth: hci3: command tx timeout [ 388.158833] Bluetooth: hci2: command tx timeout [ 388.477965] Bluetooth: hci4: command tx timeout [ 388.733887] Bluetooth: hci6: command tx timeout [ 388.797888] Bluetooth: hci5: command tx timeout [ 388.926327] Bluetooth: hci7: command tx timeout [ 389.822186] Bluetooth: hci0: command tx timeout [ 390.014137] Bluetooth: hci1: command tx timeout [ 390.142761] Bluetooth: hci3: command tx timeout [ 390.205992] Bluetooth: hci2: command tx timeout [ 390.526815] Bluetooth: hci4: command tx timeout [ 390.782005] Bluetooth: hci6: command tx timeout [ 390.846016] Bluetooth: hci5: command tx timeout [ 390.973862] Bluetooth: hci7: command tx timeout [ 391.869848] Bluetooth: hci0: command tx timeout [ 392.061968] Bluetooth: hci1: command tx timeout [ 392.191167] Bluetooth: hci3: command tx timeout [ 392.254129] Bluetooth: hci2: command tx timeout [ 392.573870] Bluetooth: hci4: command tx timeout [ 392.831136] Bluetooth: hci6: command tx timeout [ 392.893858] Bluetooth: hci5: command tx timeout [ 393.021894] Bluetooth: hci7: command tx timeout [ 393.918812] Bluetooth: hci0: command tx timeout [ 394.109863] Bluetooth: hci1: command tx timeout [ 394.237826] Bluetooth: hci3: command tx timeout [ 394.301992] Bluetooth: hci2: command tx timeout [ 394.621833] Bluetooth: hci4: command tx timeout [ 394.877805] Bluetooth: hci6: command tx timeout [ 394.941847] Bluetooth: hci5: command tx timeout [ 395.071985] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 17:56:38 Registers: info registers vcpu 0 RAX=000000000000002d RBX=0000000000000000 RCX=00000000ffffffff RDX=0000000000000001 RSI=0000000000000000 RDI=ffff8880094b8168 RBP=ffffea0000d1d980 RSP=ffff88802a717790 R8 =0000000000000a59 R9 =0000000000000a58 R10=ffffffff8641fb57 R11=0000000000000001 R12=ffff8880094b8040 R13=0000000000000001 R14=ffff8880094b8040 R15=ffffffffffffffff RIP=ffffffff81b1261e RFL=00000013 [----A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe2300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005652139dd4c8 CR3=000000002deba000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff00000000000000000000000000ff00 XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85c1d1c0 RDI=ffff88802734c180 RBP=ffffffff85c1d1c0 RSP=ffff88802e36fa88 R8 =0000000000000001 R9 =fffff9400036f22e R10=0000000000000000 R11=0000000000000001 R12=ffff88802734b700 R13=ffff88802734c158 R14=00000000ffffffff R15=ffff88802734c180 RIP=ffffffff84b40973 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fef2f40e540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe1900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fef2f650000 CR3=000000001a56e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000