syzkaller login: [ 60.156062] scp (245) used greatest stack depth: 23440 bytes left Warning: Permanently added '[localhost]:54910' (ECDSA) to the list of known hosts. 2024/10/20 17:12:48 fuzzer started 2024/10/20 17:12:49 dialing manager at localhost:45639 [ 62.315631] cgroup: Unknown subsys name 'net' [ 62.496699] cgroup: Unknown subsys name 'cpuset' [ 62.518556] cgroup: Unknown subsys name 'rlimit' 2024/10/20 17:13:06 syscalls: 203 2024/10/20 17:13:06 code coverage: enabled 2024/10/20 17:13:06 comparison tracing: enabled 2024/10/20 17:13:06 extra coverage: enabled 2024/10/20 17:13:06 setuid sandbox: enabled 2024/10/20 17:13:06 namespace sandbox: enabled 2024/10/20 17:13:06 Android sandbox: enabled 2024/10/20 17:13:06 fault injection: enabled 2024/10/20 17:13:06 leak checking: enabled 2024/10/20 17:13:06 net packet injection: enabled 2024/10/20 17:13:06 net device setup: enabled 2024/10/20 17:13:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/20 17:13:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/20 17:13:06 USB emulation: enabled 2024/10/20 17:13:06 hci packet injection: enabled 2024/10/20 17:13:06 wifi device emulation: enabled 2024/10/20 17:13:06 802.15.4 emulation: enabled 2024/10/20 17:13:06 fetching corpus: 0, signal 0/0 (executing program) 2024/10/20 17:13:08 starting 8 fuzzer processes 17:13:08 executing program 0: r0 = syz_io_uring_complete(0x0) r1 = syz_io_uring_setup(0x5502, &(0x7f0000000000)={0x0, 0x8fe9, 0x0, 0x0, 0x22a, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x114, &(0x7f0000000100), 0x0, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x1010, r1, 0x8000000) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r3, 0x11, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f00000001c0)) syz_io_uring_setup(0x4488, &(0x7f0000000200)={0x0, 0x4376, 0x0, 0x3, 0x91, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_setup(0x6d91, &(0x7f0000000300)={0x0, 0x3058, 0x2, 0x1, 0x3b4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380), &(0x7f00000003c0)=0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000400)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r8}}, 0x7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4040011) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r9) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x130, r10, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xa0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa62c}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x983b}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x130}, 0x1, 0x0, 0x0, 0xc0}, 0x4000040) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x4}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x7f}]}, 0x4c}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x7ff, 0xea0, {{0x28, 0x4, 0x2, 0x9, 0xa0, 0x65, 0x0, 0x3f, 0x2f, 0x0, @rand_addr=0x64010100, @local, {[@timestamp_addr={0x44, 0x2c, 0xd, 0x1, 0x4, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x3}, {@remote, 0x7}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x400}, {@broadcast, 0x6}]}, @noop, @timestamp_addr={0x44, 0x14, 0x77, 0x1, 0x4, [{@private=0xa010100, 0xffffffff}, {@loopback, 0x8}]}, @end, @timestamp={0x44, 0x8, 0xf6, 0x0, 0xa, [0x6]}, @timestamp_addr={0x44, 0x14, 0xc0, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0x39}]}, @ssrr={0x89, 0x17, 0x29, [@remote, @local, @local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xc5, [@private=0xa010102]}, @rr={0x7, 0xf, 0x48, [@dev={0xac, 0x14, 0x14, 0x1a}, @remote, @local]}]}}}}}) 17:13:08 executing program 3: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\\!\x00', &(0x7f0000000040)="af4f6330cff402186117a3e96e6c86ecbbc977e094af69a6f5fc16c8ece5b522038c601c2f36d60b67f932928adba9b9748477bfd6c1b99bdd81ce7319f4f94a0896dee4d11ae5bcba2506f84d5b3efb8eea2700e25f7a1915890f629138c884ab8c1e88363f34517b9a2221b19e8602c62146fac6bc5a", 0x77) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x20, 0x81, 0x8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1, 0x1, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x210000, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000280)=@req={0xffff7fff, 0x8, 0x6, 0x2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0xff, 0x4, 0x2, 0x80000001}, {0x3, 0x4, 0x23, 0x1}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x6, &(0x7f0000000340)=[{0x78, 0x5, 0x1, 0xfffff801}, {0x81, 0x2, 0xf4, 0x100}, {0x400, 0x1, 0x8, 0x2}, {0x9, 0x4, 0x1f, 0x2}, {0x1f, 0x2, 0x6, 0x1000}, {0xa740, 0x61, 0x1f, 0xffffffff}]}) setsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f00000003c0)=0x80000000, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000400)={{0x0, 0x1, 0x76a5, 0x0, 0x2}, 0x8, 0x2, 0xfffffffffffff102}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000480)={0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) fsopen(&(0x7f0000000500)='pvfs2\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000540)={r4, 0x3, 0xffffffffffffffff, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe98}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x408d}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) 17:13:08 executing program 1: fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='\x00', &(0x7f0000000040)="a98d8290d67784f0543310e040e5e6a2d77f9c8f85b434b30b2c5838a03e55e658c24233f5de9f87982aea0b6232450d5b141fa608b8907b37e546f6814439a74f9e4cc82154521996f63f3ef18a0a3fc756290b5c72d2bac81e51dea46bb66947dd1e9f4c94774ebef94e94a1f9041c98fdf4991de186ae67dfa87842a148631b7b9ad54e3d0e7bd6323ae92d5c46e878c97a104b4cc28262d867574bbe1fbfc7495ac18858bb1c28b6caf2b74ac5330cfa793c8201db63c660efa989a70566a9b52515cdbcbe9dfbbc800482b7a6a2cc414cb165f61be436c51a3256e9", 0xde) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='#\\\'$*#\x00', &(0x7f00000001c0)='\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x3}}}}, [@NL80211_ATTR_SSID={0x21, 0x34, @random="5138d3e3f0e0fb10a8b53e0646267022b84e1c941cc6f5e55d998a0222"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "6af5ff067c5c315dabb7640714b96246"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x38}, @NL80211_ATTR_PMK={0x14, 0xfe, "2838e1970e877f14bc008815e087f161"}, @NL80211_ATTR_PMKID={0x14, 0x55, "e2d12896f4e3cbfd11f481e8ee15a7fe"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}]}, 0x98}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r2 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0x100}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2008000}, 0x4060) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000780)={0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000800)={r4, 0x3, r5, 0x4, 0x80000}) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x1, 0x80000000, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xffffffc0, 0x41}}}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, 0x0, 0x8c91c8c269ae4c53, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000ac0)='wpan4\x00', &(0x7f0000000b00)='./file0\x00', r2) 17:13:08 executing program 2: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) accept$packet(r0, 0x0, &(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000080)) r1 = syz_io_uring_complete(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={0x0, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x12, 0x6, @multicast}, 0x14) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000180)={{0x2, 0x1, 0x6, 0x2, 0x4f0}, 0xd40, 0xc94, 'id1\x00', 'timer1\x00', 0x0, 0xb978, 0x6, 0x3, 0x2}) r3 = fsopen(&(0x7f0000000280)='ufs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000002c0)='{)@/#\x00', &(0x7f0000000300)='./file0\x00', r0) r4 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000340)='mand\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "0a2924cdac200e85c77ce86e0bb7d705cd8c13bc61540e5e"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x820}, 0x20004081) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500), 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100000, 0x59}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 17:13:08 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x105, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x400}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040081}, 0x8010) prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40005}, 0x20004005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x674, 0x8, 0x6, 0x2}, {0x100, 0x6, 0x7, 0x8}]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)={0xd0, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xa416083d06981806}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6c}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x5555555555540704}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20040060) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000900)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r8, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xa0, r5, 0x404, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3f}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20044010}, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) [ 80.343463] audit: type=1400 audit(1729444388.088:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 17:13:08 executing program 6: sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x94, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x52d}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4aee39e2aa9fa83bc8624453c87dffe1a7ce7cd86a812fa60e76f539e82977c9"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1127faffefb4bfbf6dbe78f9d2cb244010517f317b5815fde1b114e1c11d7912"}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20008814}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "79f25d7792bf119a4cc2cff8fb745c13"}, @NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8a1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x3}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000800)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x800) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xd1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000b80), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000d40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x114, r9, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d63d344}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe124}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b1d352}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x754e2510}]}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d6e88a6}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x577893d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x63013675}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61956b3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x101d3ac9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a89e3b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc89844f}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4bf19001}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfff}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf37e420}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x24, 0x8, 0x0, 0x1, [{0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1a69cc70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf63b3d9}]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44040050}, 0x4008080) 17:13:08 executing program 5: ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x40, 0x6, 0x4, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x10, 0x1, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x80, 0x20, 0x2c, 0xff, {{0x1b, 0x4, 0x1, 0x24, 0x6c, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @empty, {[@generic={0x94, 0xf, "73c5140e6e055af5a09d2f6562"}, @timestamp_prespec={0x44, 0x24, 0xff, 0x3, 0x0, [{@multicast2, 0x7221}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}, {@multicast1, 0x1}, {@loopback, 0x2}]}, @ssrr={0x89, 0x3, 0x24}, @generic={0x7, 0x12, "6ec0b0e84d9e4bdedad4cde9290a045b"}, @timestamp={0x44, 0x10, 0x9, 0x0, 0x8, [0xfffffc00, 0x1ff, 0x7]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x81, 0x5, {{0x3f, 0x4, 0x2, 0x3, 0xfc, 0x67, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010102, @rand_addr=0x1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x59, [@loopback, @loopback, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @lsrr={0x83, 0x23, 0x38, [@multicast2, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010101, @multicast1, @broadcast]}, @cipso={0x86, 0xf, 0x3, [{0x2, 0x9, "fcff1b0231663c"}]}, @timestamp_prespec={0x44, 0x34, 0x62, 0x3, 0x8, [{@rand_addr=0x64010100, 0x8}, {@multicast2}, {@local, 0x80}, {@private=0xa010100, 0x2}, {@loopback, 0x3}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x44, 0xbb, 0x3, 0x3, [{@loopback, 0x3}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x1000}, {@private=0xa010100, 0x2d5e}, {@local, 0x8}, {@remote, 0x10000}, {@local, 0x7}, {@loopback}, {@empty, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0xf2, 0x3, 0x3, [{@broadcast}, {@multicast2, 0x401}, {@multicast2, 0xd11}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x1f, 0x8b, 0xfdb2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x7800, 0x9, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x8000, 0x80, 0x1ff, 0x9, {{0x32, 0x4, 0x2, 0x28, 0xc8, 0x68, 0xfffd, 0x20, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x8, 0x73, 0x0, 0x2, [0xcd2]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0x6, [0xffffff5a, 0x6, 0x1, 0x7, 0xcd, 0x101]}, @ssrr={0x89, 0x27, 0xe3, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @broadcast, @multicast1, @rand_addr=0x64010101, @local, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp={0x44, 0x14, 0x27, 0x0, 0x3, [0x8, 0x6, 0xfffffeff, 0x3]}, @ssrr={0x89, 0x17, 0x5c, [@local, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3c, 0xfffffffffffffffc, [{0x1, 0x12, "209fcb19f41bf43d343dd3bf930c8294"}, {0x0, 0xe, "c7378ab318a1f1b12be62633"}, {0x0, 0x7, "3ab8b05696"}, {0x2, 0x3, "a8"}, {0x6, 0xc, "d4f03c2000ee22c613ce"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x5, 0x88f9, 0x20, @local, @loopback, 0x20, 0x40, 0x7, 0xfffff503}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x20, 0x80, 0x2, 0x5e9, {{0x2a, 0x4, 0x2, 0x3b, 0xa8, 0x68, 0x0, 0xed, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x14, 0x18, 0x1, 0x6, [{@private=0xa010100, 0x6}, {@empty, 0x3}]}, @generic={0x49449a1462e5bed6, 0x5, "dad6d4"}, @noop, @generic={0x88, 0x9, "028e9342aedd8c"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x22, 0x2, [{0x1, 0x5, "d937c3"}, {0x1, 0x3, "ad"}, {0x6, 0x2}, {0x0, 0x12, "e45aad8a8695c64768a152c07ff09341"}]}, @rr={0x7, 0x7, 0x1f, [@local]}, @timestamp_addr={0x44, 0x44, 0xae, 0x1, 0x7, [{@empty, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x10}}, {@multicast2, 0x374}, {@private=0xa010102, 0x4}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@multicast1, 0x7ff}, {@rand_addr=0x64010100, 0x800}, {@multicast1, 0x101}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e40)={&(0x7f0000000800)={0x630, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r0}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x791}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x34b24b21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6f8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf6ff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x40000}, 0x40854) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f40)={'gre0\x00', &(0x7f0000000ec0)={'gretap0\x00', r7, 0x8, 0x7800, 0xfffffff7, 0x100, {{0x14, 0x4, 0x3, 0x1a, 0x50, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @local, {[@generic={0x94, 0xf, "e1ac6b335edca3f85253302b81"}, @end, @rr={0x7, 0x2b, 0xf2, [@multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2c}, @empty, @broadcast, @multicast2, @loopback, @dev={0xac, 0x14, 0x14, 0x2f}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001100)={'ip_vti0\x00', &(0x7f0000001040)={'syztnl0\x00', r4, 0x80, 0x700, 0x9, 0x5, {{0x20, 0x4, 0x1, 0x0, 0x80, 0x66, 0x0, 0x2, 0x4, 0x0, @loopback, @empty, {[@cipso={0x86, 0x17, 0x0, [{0x5, 0xf, "aab2fed55835dddb1b96daa6ba"}, {0x0, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xe7, 0x3, 0x3, [{@local}, {@empty, 0x1000}, {@empty, 0x6}]}, @timestamp_addr={0x44, 0x34, 0xc4, 0x1, 0x7, [{@loopback, 0x1}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x8}, {@rand_addr=0x64010101, 0x5}, {@empty, 0xfa8}, {@loopback, 0x469f874b}]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000011c0)={'ip6_vti0\x00', &(0x7f0000001140)={'ip6_vti0\x00', r3, 0x29, 0x8, 0xff, 0x481, 0x10, @remote, @mcast1, 0x7800, 0x8, 0xfffffff9, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001280)={'syztnl2\x00', &(0x7f0000001200)={'syztnl2\x00', r3, 0x40, 0x10, 0x7fff, 0x1, {{0x18, 0x4, 0x3, 0x36, 0x60, 0x67, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @remote, {[@timestamp_addr={0x44, 0x44, 0x38, 0x1, 0x9, [{@dev={0xac, 0x14, 0x14, 0x21}, 0x3}, {@loopback, 0x3}, {@local, 0x6}, {@remote, 0x8}, {@multicast2, 0x2}, {@loopback, 0xfffffc01}, {@broadcast, 0x7e2}, {@remote, 0x7}]}, @timestamp={0x44, 0x8, 0x2a, 0x0, 0x8, [0x4]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001300)={0x588, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}]}}, {{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x186}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x101, 0x9, 0x6, 0xfffffffe}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x588}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 17:13:08 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000080)={0x180005, 0x70, 0x100000}, 0x20) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20004000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfc25, 0x37}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x34}, @NL80211_ATTR_PMKID={0x14, 0x55, "75791ffdb0aa8dc0c596d0d7e2ec959e"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x6a}, @NL80211_ATTR_PMKID={0x14, 0x55, "ece8d10617b17a22975153d7878426d5"}, @NL80211_ATTR_SSID={0xe, 0x34, @random="6fbc0f298bd7b1bdb9fa"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="a225fe735adf"}, @NL80211_ATTR_PMKID={0x14, 0x55, "be1e4cef7edcaef8862be4cf96735dd5"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x38}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x7}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008015}, 0x4000001) r2 = io_uring_setup(0x1548, &(0x7f00000003c0)={0x0, 0x33b6, 0x4, 0x2, 0x308, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x10, r2, 0x8000000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x80, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x40}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "70c8ac29074ed4c46dbd1f3319f51c25ab209a8f63dfbfed"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e640e5b9538edc135fdff8e44559c1c565fe4e275c90a812"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x80d4}, 0x800) r4 = io_uring_setup(0x6257, &(0x7f00000005c0)={0x0, 0x9b83, 0x4, 0x100, 0xff, 0x0, r3}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x4000080) sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1f0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80000000, @loopback, 0x3}}}}]}, @TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "028b7a3b8d3aa95e6c3e3e6be7d8674fe7e5110e1a6c930985f544dd5123f60849"}}, @TIPC_NLA_NODE_ID={0xc5, 0x3, "9057ec2d405b4a829564c2a7b231bfd26ff4c99581d6a7e58aad0b7377fff46894aa0ec1288c8cc6755223171d6d80c62790a1e945edcbd87251ab45967175cdde473d1f9fbe1f3bb11140fc00069d3c1634cd8657424e56b307a6de7928cd9b92448247712acebfd7a9d7b9a1d56c00d25d3699bb52e4c6c5414f6f66f5015e8daa09d3898cc8e4c1aecb091926bf40f6c75395c191fbb6e06a997a3e58fbe31955abe47b09aa092336809a3251c860188e83cf7f89857cce2afa82b1c51f0920"}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd38}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}]}]}, 0x1f0}}, 0x2) [ 81.689427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.720697] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.739629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.741992] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.746244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.749147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.751482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.751607] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.753281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.753613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.755143] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.755991] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.767861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.775931] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.777689] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.781197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.793587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.794508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.796661] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.799103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.804755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.829601] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.831481] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.832580] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.859846] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 81.862516] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 81.865317] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 81.866978] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.868559] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 81.869631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 81.870841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 81.874846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.878582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.886149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 81.893825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.895569] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.897029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.899547] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 81.901795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 81.904675] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 81.905828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 81.925708] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 81.925830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 81.927233] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 81.928316] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 81.943046] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 81.943149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 81.945317] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 83.826855] Bluetooth: hci0: command tx timeout [ 83.827756] Bluetooth: hci1: command tx timeout [ 83.890674] Bluetooth: hci2: command tx timeout [ 83.891338] Bluetooth: hci3: command tx timeout [ 83.954432] Bluetooth: hci4: command tx timeout [ 84.018987] Bluetooth: hci7: command tx timeout [ 84.020631] Bluetooth: hci6: command tx timeout [ 84.022170] Bluetooth: hci5: command tx timeout [ 85.876703] Bluetooth: hci1: command tx timeout [ 85.878478] Bluetooth: hci0: command tx timeout [ 85.938465] Bluetooth: hci3: command tx timeout [ 85.939792] Bluetooth: hci2: command tx timeout [ 86.002611] Bluetooth: hci4: command tx timeout [ 86.066486] Bluetooth: hci6: command tx timeout [ 86.066996] Bluetooth: hci5: command tx timeout [ 86.067031] Bluetooth: hci7: command tx timeout [ 87.922556] Bluetooth: hci0: command tx timeout [ 87.922573] Bluetooth: hci1: command tx timeout [ 87.988415] Bluetooth: hci3: command tx timeout [ 87.988497] Bluetooth: hci2: command tx timeout [ 88.050536] Bluetooth: hci4: command tx timeout [ 88.114804] Bluetooth: hci5: command tx timeout [ 88.114823] Bluetooth: hci6: command tx timeout [ 88.115642] Bluetooth: hci7: command tx timeout [ 89.970575] Bluetooth: hci1: command tx timeout [ 89.971470] Bluetooth: hci0: command tx timeout [ 90.034463] Bluetooth: hci2: command tx timeout [ 90.034957] Bluetooth: hci3: command tx timeout [ 90.099416] Bluetooth: hci4: command tx timeout [ 90.163293] Bluetooth: hci6: command tx timeout [ 90.163524] Bluetooth: hci7: command tx timeout [ 90.164609] Bluetooth: hci5: command tx timeout [ 144.641506] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.642616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.645825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.648518] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.651660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.654825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.663939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.664718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.667291] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.667351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.668958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.670027] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.718906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 144.721733] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 144.722675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.724102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 144.727496] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.729667] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 144.731703] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 144.742470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 144.746870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.761432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.765297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.767560] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.770062] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.773879] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.777460] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.782691] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.790739] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 144.792120] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 144.793453] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 144.796141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 144.797603] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.798782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 144.799536] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.801039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 144.819840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.825784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.841574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.861623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.868278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.869738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.880537] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.883109] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.885646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.891398] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.892825] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 144.894565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.738807] Bluetooth: hci1: command tx timeout [ 146.740216] Bluetooth: hci0: command tx timeout [ 146.866453] Bluetooth: hci2: command tx timeout [ 146.867289] Bluetooth: hci3: command tx timeout [ 146.867913] Bluetooth: hci7: command tx timeout [ 146.930462] Bluetooth: hci5: command tx timeout [ 146.995906] Bluetooth: hci6: command tx timeout [ 146.996795] Bluetooth: hci4: command tx timeout [ 148.789416] Bluetooth: hci1: command tx timeout [ 148.789951] Bluetooth: hci0: command tx timeout [ 148.915460] Bluetooth: hci7: command tx timeout [ 148.915986] Bluetooth: hci2: command tx timeout [ 148.917431] Bluetooth: hci3: command tx timeout [ 148.979847] Bluetooth: hci5: command tx timeout [ 149.043422] Bluetooth: hci4: command tx timeout [ 149.044805] Bluetooth: hci6: command tx timeout [ 150.835446] Bluetooth: hci0: command tx timeout [ 150.836868] Bluetooth: hci1: command tx timeout [ 150.963446] Bluetooth: hci2: command tx timeout [ 150.964868] Bluetooth: hci3: command tx timeout [ 150.966428] Bluetooth: hci7: command tx timeout [ 151.029358] Bluetooth: hci5: command tx timeout [ 151.093021] Bluetooth: hci6: command tx timeout [ 151.094507] Bluetooth: hci4: command tx timeout [ 152.882461] Bluetooth: hci0: command tx timeout [ 152.884003] Bluetooth: hci1: command tx timeout [ 153.010438] Bluetooth: hci2: command tx timeout [ 153.011813] Bluetooth: hci3: command tx timeout [ 153.013183] Bluetooth: hci7: command tx timeout [ 153.074548] Bluetooth: hci5: command tx timeout [ 153.139430] Bluetooth: hci4: command tx timeout [ 153.140835] Bluetooth: hci6: command tx timeout [ 206.893788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.895412] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.896526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.897920] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.900921] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.902738] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.903873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.904481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.908568] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.921034] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.923594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 206.925765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.989044] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.008003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.017124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.067449] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.163596] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.164959] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.376486] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 207.384403] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 207.388932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.411616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.420929] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 207.423909] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 207.425191] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 207.427651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 207.427797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 207.430094] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 207.433053] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 207.433590] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 207.439626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 207.444744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.445286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.448995] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 207.450206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.451692] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.453065] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.454819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.457619] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 207.459257] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 207.463096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.467085] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.481689] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.489131] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.491827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.493031] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.510090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.515145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.947423] Bluetooth: hci1: command tx timeout [ 209.011425] Bluetooth: hci0: command tx timeout [ 209.202444] Bluetooth: hci2: command tx timeout [ 209.586728] Bluetooth: hci6: command tx timeout [ 209.586793] Bluetooth: hci3: command tx timeout [ 209.589099] Bluetooth: hci7: command tx timeout [ 209.650760] Bluetooth: hci5: command tx timeout [ 209.651386] Bluetooth: hci4: command tx timeout [ 210.995080] Bluetooth: hci1: command tx timeout [ 211.060348] Bluetooth: hci0: command tx timeout [ 211.250424] Bluetooth: hci2: command tx timeout [ 211.634483] Bluetooth: hci7: command tx timeout [ 211.635910] Bluetooth: hci3: command tx timeout [ 211.636189] Bluetooth: hci6: command tx timeout [ 211.698475] Bluetooth: hci4: command tx timeout [ 211.698537] Bluetooth: hci5: command tx timeout [ 213.042585] Bluetooth: hci1: command tx timeout [ 213.106700] Bluetooth: hci0: command tx timeout [ 213.299344] Bluetooth: hci2: command tx timeout [ 213.683461] Bluetooth: hci3: command tx timeout [ 213.683967] Bluetooth: hci6: command tx timeout [ 213.684672] Bluetooth: hci7: command tx timeout [ 213.746448] Bluetooth: hci4: command tx timeout [ 213.749368] Bluetooth: hci5: command tx timeout [ 215.091446] Bluetooth: hci1: command tx timeout [ 215.155539] Bluetooth: hci0: command tx timeout [ 215.348034] Bluetooth: hci2: command tx timeout [ 215.731491] Bluetooth: hci7: command tx timeout [ 215.731555] Bluetooth: hci6: command tx timeout [ 215.733107] Bluetooth: hci3: command tx timeout [ 215.794506] Bluetooth: hci5: command tx timeout [ 215.794529] Bluetooth: hci4: command tx timeout [ 269.054797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.057498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.059828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.064409] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.066141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.067533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.113128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.116559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.127724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.131212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.133736] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.147415] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.184951] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.186546] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.189864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.201995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.203791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.204909] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.371660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.375818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.378226] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.388528] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.390517] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.393163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.395943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.399812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.402172] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.404488] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.406518] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.408837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.437575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.458081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.474106] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 269.476152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.482174] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 269.485080] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 269.486775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 269.488036] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 269.491931] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 269.497495] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 269.498526] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 269.525666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.528261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 269.531532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 269.544689] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 269.587632] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 269.596535] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 269.605413] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.091115] Bluetooth: hci0: command tx timeout [ 271.221347] Bluetooth: hci1: command tx timeout [ 271.282507] Bluetooth: hci2: command tx timeout [ 271.474499] Bluetooth: hci4: command tx timeout [ 271.474593] Bluetooth: hci3: command tx timeout [ 271.538579] Bluetooth: hci7: command tx timeout [ 271.666491] Bluetooth: hci5: command tx timeout [ 271.666557] Bluetooth: hci6: command tx timeout [ 273.138511] Bluetooth: hci0: command tx timeout [ 273.266620] Bluetooth: hci1: command tx timeout [ 273.330560] Bluetooth: hci2: command tx timeout [ 273.522401] Bluetooth: hci4: command tx timeout [ 273.523400] Bluetooth: hci3: command tx timeout [ 273.586395] Bluetooth: hci7: command tx timeout [ 273.714370] Bluetooth: hci6: command tx timeout [ 273.716481] Bluetooth: hci5: command tx timeout [ 275.186408] Bluetooth: hci0: command tx timeout [ 275.316348] Bluetooth: hci1: command tx timeout [ 275.379359] Bluetooth: hci2: command tx timeout [ 275.570452] Bluetooth: hci4: command tx timeout [ 275.571947] Bluetooth: hci3: command tx timeout [ 275.634552] Bluetooth: hci7: command tx timeout [ 275.762602] Bluetooth: hci6: command tx timeout [ 275.762629] Bluetooth: hci5: command tx timeout [ 277.234392] Bluetooth: hci0: command tx timeout [ 277.362892] Bluetooth: hci1: command tx timeout [ 277.426530] Bluetooth: hci2: command tx timeout [ 277.620343] Bluetooth: hci3: command tx timeout [ 277.621940] Bluetooth: hci4: command tx timeout [ 277.683419] Bluetooth: hci7: command tx timeout [ 277.810379] Bluetooth: hci5: command tx timeout [ 277.811970] Bluetooth: hci6: command tx timeout [ 331.267660] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.271683] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.277738] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.286209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.292668] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.294154] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.455074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.457175] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.460661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.467494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.469976] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 331.471694] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 331.517084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.520704] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.526757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.533131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.535187] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.537714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.723940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.728996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.730875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.741374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.743359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.745234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.760241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.762967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.777969] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.799329] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.801474] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 331.809603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.815249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.817495] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.819099] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.821747] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 331.831616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.838691] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 331.841608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.842972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.849087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.850401] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.852003] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.853709] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 331.856089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.857418] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.857718] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 331.862165] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 331.863969] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 331.865328] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 333.363398] Bluetooth: hci0: command tx timeout [ 333.490476] Bluetooth: hci1: command tx timeout [ 333.554946] Bluetooth: hci2: command tx timeout [ 333.810448] Bluetooth: hci3: command tx timeout [ 333.875378] Bluetooth: hci7: command tx timeout [ 333.876409] Bluetooth: hci4: command tx timeout [ 333.940359] Bluetooth: hci6: command tx timeout [ 333.940398] Bluetooth: hci5: command tx timeout [ 335.410631] Bluetooth: hci0: command tx timeout [ 335.538395] Bluetooth: hci1: command tx timeout [ 335.603127] Bluetooth: hci2: command tx timeout [ 335.858374] Bluetooth: hci3: command tx timeout [ 335.923392] Bluetooth: hci4: command tx timeout [ 335.923413] Bluetooth: hci7: command tx timeout [ 336.004398] Bluetooth: hci5: command tx timeout [ 336.004451] Bluetooth: hci6: command tx timeout [ 337.458451] Bluetooth: hci0: command tx timeout [ 337.586450] Bluetooth: hci1: command tx timeout [ 337.675327] Bluetooth: hci2: command tx timeout [ 337.906454] Bluetooth: hci3: command tx timeout [ 337.970383] Bluetooth: hci4: command tx timeout [ 337.971362] Bluetooth: hci7: command tx timeout [ 338.034405] Bluetooth: hci6: command tx timeout [ 338.039115] Bluetooth: hci5: command tx timeout [ 339.506666] Bluetooth: hci0: command tx timeout [ 339.634380] Bluetooth: hci1: command tx timeout [ 339.698598] Bluetooth: hci2: command tx timeout [ 339.954398] Bluetooth: hci3: command tx timeout [ 340.018365] Bluetooth: hci4: command tx timeout [ 340.019469] Bluetooth: hci7: command tx timeout [ 340.082397] Bluetooth: hci5: command tx timeout [ 340.083416] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 17:18:18 Registers: info registers vcpu 0 RAX=0000000000000002 RBX=ffff88803627260a RCX=00000000caef8822 RDX=1ffff11006c4e4b7 RSI=0000000000000001 RDI=00000000118d5202 RBP=ffff888036271b80 RSP=ffff88803401ef40 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=ffffffff87ed4ea7 R11=00000000000c2f81 R12=ffff8880362725e8 R13=87ae30098951f416 R14=ffffffff863f34b4 R15=0000000000000000 RIP=ffffffff812fb721 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f588ea1f27c CR3=0000000034c7a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78 XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81936d5d RDX=ffff88802e200000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888009160c80 RSP=ffff888031767990 R8 =0000000000000000 R9 =ffff88802e200a38 R10=0000000000000000 R11=0000000000000001 R12=0000000000000081 R13=ffffffff85d16040 R14=ffff888009160ca8 R15=0000000000000000 RIP=ffffffff81517c20 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007feb0a432540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6100000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007feb0a5cd4a1 CR3=000000003450c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=2d646c6f2074736f0065736100006266 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000