Warning: Permanently added '[localhost]:9158' (ECDSA) to the list of known hosts.
2025/06/24 03:32:05 fuzzer started
2025/06/24 03:32:06 dialing manager at localhost:37113
syzkaller login: [   97.832920] cgroup: Unknown subsys name 'net'
[   97.974795] cgroup: Unknown subsys name 'cpuset'
[   98.026844] cgroup: Unknown subsys name 'rlimit'
2025/06/24 03:32:21 syscalls: 204
2025/06/24 03:32:21 code coverage: enabled
2025/06/24 03:32:21 comparison tracing: enabled
2025/06/24 03:32:21 extra coverage: enabled
2025/06/24 03:32:21 setuid sandbox: enabled
2025/06/24 03:32:21 namespace sandbox: enabled
2025/06/24 03:32:21 Android sandbox: enabled
2025/06/24 03:32:21 fault injection: enabled
2025/06/24 03:32:21 leak checking: enabled
2025/06/24 03:32:21 net packet injection: enabled
2025/06/24 03:32:21 net device setup: enabled
2025/06/24 03:32:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/06/24 03:32:21 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/06/24 03:32:21 USB emulation: enabled
2025/06/24 03:32:21 hci packet injection: enabled
2025/06/24 03:32:21 wifi device emulation: enabled
2025/06/24 03:32:21 802.15.4 emulation: enabled
2025/06/24 03:32:21 fetching corpus: 0, signal 0/0 (executing program)
2025/06/24 03:32:22 starting 8 fuzzer processes
03:32:22 executing program 0:
r0 = fsmount(0xffffffffffffffff, 0x0, 0x1)
ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0x80, 0x0, 0x40, 0x6, 0x0, 0x200, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x2a0, 0x1, 0x7, 0x5, 0x3, 0x1000, 0x1f, 0x0, 0x6e1, 0x0, 0xd07}, r0, 0xc, 0xffffffffffffffff, 0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
fork()
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST(r1, 0x40383d03, &(0x7f0000000100)={{0x5, 0x3}, {0x6, 0x2}, 0x8000, 0x1})
ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x4000000)
ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f0000000280)={0xa})
r4 = socket(0xd5600307d1dcf01a, 0x6, 0x401)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "89839a97"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
r6 = fsmount(r2, 0x0, 0xd)
syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000900)={0x0, 0x1, 0x10000, 0x2, 0x6})

03:32:22 executing program 1:
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)="7b16455a38c63b201588dc956ad51708cb5d8596742d4e66aaedacba", 0x1c)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000140)='+\\\x00', 0x0, r0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/keys\x00', 0x0, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000280)=@gcm_128={{0x303}, "e673b546edbb25bb", "205b2901a17879766274a0c09e3677f2", "6398e841", "657ac739e0e288d5"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "2ebc5f5d8185805f", "b04eacd695304ed2a6678cfa520bfdb6c350d7b15bae794f9c142c0a4b6b03b8", "7dc41917", "10eea246b1226488"}, 0x38)
epoll_create1(0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
write$snapshot(r1, &(0x7f0000000300)="d3bc9b237b9673dee43cfba0b59155fb1c2f19e4a99d209ff46cba20b8f5443c8e0d2bef8c", 0x25)
epoll_create(0x6)
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc, 0x1010, r0, 0x10000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_submit(0x0, r4, &(0x7f0000001780)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2000, @fd=r5, 0x80000001, &(0x7f0000001700)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/210, 0xd2}, {&(0x7f0000001440)=""/160, 0xa0}, {&(0x7f0000001500)=""/214, 0xd6}, {&(0x7f0000001600)=""/193, 0xc1}], 0x5, 0x4, 0x1}, 0xff)
syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0)

[  114.550817] audit: type=1400 audit(1750735943.016:7): avc:  denied  { execmem } for  pid=274 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
03:32:23 executing program 2:
accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window={0x3, 0x4, 0x3f}, @timestamp], 0x2)
ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.kill\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000140)={0x3, 0x2, 0x5, 0x3})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0x24080, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f00000001c0)={{0x3, 0x1, 0xce62, 0x3, 0x401}, 0x8, 0x5, 'id0\x00', 'timer0\x00', 0x0, 0xffffffffffffff00, 0x5, 0x1})
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup(r2, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x5, 0x2, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x20, 0x1, 0xbb4d, 0x20}})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b40)={&(0x7f0000000440)={0x6ec, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x64, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7ff}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3d}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa0}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x564, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x38070065e19ad669}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa6}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x2f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2b4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x1a, 0xe5, 0xc, 0x24, 0x4, 0x36, 0x30, 0x2f, 0xd, 0x16, 0x24, 0x3, 0xc, 0x2]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7, 0x1ff, 0x9, 0xbe99, 0x6, 0xb9f8, 0x8]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0xc, 0x18, 0xc, 0x1b, 0x9, 0x4, 0xb, 0x8, 0x6c, 0xf01f2f260a101d11, 0x30, 0x4, 0x48, 0x9, 0x18, 0x18, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x4, 0x36, 0x6c, 0x24, 0x36, 0x1, 0xb, 0x4, 0x4, 0x36, 0x4, 0x1, 0x60, 0x6, 0x2, 0x16, 0x2]}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x1, 0x9}, {0x0, 0xa}, {0x5, 0xa}, {0x5, 0x5}, {0x3, 0x2}, {0x2, 0x6}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x1}, {0x3, 0xa}, {0x7, 0x1}, {0x4, 0x3}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0x9, 0x12, 0x48, 0xb, 0x16, 0x18, 0x5, 0x6, 0x3, 0x2, 0x36, 0x4, 0x16, 0xc, 0x22, 0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x7}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x0, 0x6}, {0x4}, {0x5, 0xa}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x3}, {0x7, 0x4}, {0x4, 0x8}, {0x0, 0x2}, {0x3, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x5}, {}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x5}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xf357, 0x0, 0xc2b, 0x4, 0x1, 0x7f, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x6, 0x3, 0x3, 0x2, 0x3, 0x800, 0x1bf1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x7f, 0x7, 0x1, 0x1f, 0x20, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0x4, 0x6, 0x16, 0x5, 0x12, 0x3, 0x18, 0x1, 0xb, 0x61, 0x5, 0x6c, 0x2, 0x9, 0x18, 0x7e87198985588089, 0xb, 0xb, 0x2, 0xb, 0x16, 0x24, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfff7, 0x81, 0x1, 0x401, 0x8, 0x6, 0xffe0]}}]}, @NL80211_BAND_2GHZ={0x110, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x1, 0x4, 0x60, 0x2, 0x4, 0x0, 0xc, 0x3, 0x16, 0x1b, 0x5, 0x3f, 0x18, 0x9, 0x3, 0xc, 0x18, 0x18, 0x60, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x401, 0x7df, 0x8, 0xffe8, 0x1000, 0x9, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xcd2, 0x0, 0x0, 0x1, 0x7fff, 0x6, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x4, 0xb, 0x1b, 0x36, 0x12, 0x1b, 0x1, 0x9, 0x24, 0x12, 0x68, 0x6, 0x6c, 0x5, 0x16, 0x12, 0xc, 0x2, 0xc, 0x18, 0x1, 0xa, 0x48, 0x18, 0x1, 0x30, 0x24, 0x30, 0xb, 0x36, 0x3, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x8, 0x1, 0x401, 0x5, 0x300, 0x7f, 0xfffd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x5, 0x9, 0x2, 0x0, 0x7ff, 0xfff9, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x70d8, 0x2, 0x7f, 0x2, 0x9, 0x7ff, 0xfff]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x0, 0xa}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x2}, {0x6, 0x2}, {0x7}, {}, {0x2, 0x3}, {0x4, 0x4}, {0x7}, {0x5, 0x5}, {0x1, 0x3}, {0x6, 0x2}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x3, 0x5}, {0x7, 0x4}, {0x2, 0x7}, {0x3, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x5}, {0x3, 0x8}, {0x6, 0x5}, {0x4, 0x6}, {0x3, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x5, 0x7}, {}, {0x1, 0x6}, {0x7, 0x9}, {0x1, 0x5}, {0x7}, {0x3, 0x7}, {0x1, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x7}, {0x0, 0x7}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x3}, {0x3, 0x4}, {0x2, 0x3}, {0x3, 0x6}, {0x5, 0x4}, {0x3, 0x8}, {0x4, 0xa}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x4}, {0x6, 0x6}, {0x7, 0x1}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6, 0x9}, {0x5}, {0x1, 0x9}, {0x6}, {0x2, 0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x5, 0x9}, {0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x100, 0x1, 0x4000, 0x3, 0x2, 0x2, 0x99]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x4}, {0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x6}, {0x6, 0x5}, {0x5, 0x9}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0xa}, {0x4, 0x5}, {}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {0x6, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x1}, {0x5, 0x2}, {0x3, 0x8}, {0x7, 0xa}, {0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x2}, {0x3, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0xeed, 0x2, 0xfff, 0x2, 0x9, 0x7, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x40}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9f9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xf7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x60}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x800}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa0d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x93}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x77}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4f}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x1dd7, 0x2, 0x6, 0x5, 0x0, 0x3f]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x9}, {0x5, 0x8}, {0x7, 0x3}, {0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x2}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x4}, {0x2, 0x3}, {}, {0x4, 0x7}, {0x3, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x7, 0x3}, {0x1, 0x4}, {0x7, 0xa}, {0x6, 0x9}, {0x1, 0x6}, {0x0, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0xa}, {0x2, 0x7}, {0x0, 0xa}, {0x4, 0x1}, {0x2, 0x5}, {0x2, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x4, 0x5}, {0x1, 0x6}, {0x3, 0x7}, {0x3, 0x7}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0xa4, 0x1, 0x3, 0x100, 0xb7, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x280, 0x5, 0x4, 0x7fff, 0x7fff, 0x8, 0xb90d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x60, 0x12, 0x0, 0x18, 0x30, 0x12, 0x1, 0x3, 0x1b, 0x16, 0x60, 0x9, 0x16, 0x0, 0x30, 0x8c29ef8ea10820a5, 0x5, 0x5, 0x12, 0x6, 0x60, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x6c, 0x3, 0x6c, 0x24, 0x12, 0x1, 0xb, 0x0, 0x60, 0x12, 0x4, 0x12, 0x30, 0x3, 0x6, 0xc, 0x16, 0x5, 0x5, 0x6, 0x5, 0x36, 0x18, 0x31, 0x18, 0x17, 0x4d, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x5d49b31f268399c5, 0x12, 0x36, 0x0, 0xb, 0x9, 0x30, 0x16, 0x48, 0x9, 0x4, 0x1b, 0x60, 0xc, 0x6, 0x4, 0x12, 0x18]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x9, 0xc, 0x18, 0xc, 0x2, 0x4, 0x9, 0x16, 0x1b, 0x9, 0x0, 0x13, 0x50, 0x16, 0xc, 0x5f, 0x18, 0xc]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xed}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x110, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xac}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3ff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4c}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x80000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x87}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xec}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xba}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd0}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x16}]}]}]}, 0x6ec}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0)
r5 = openat$cgroup(r4, &(0x7f0000000c00)='syz0\x00', 0x200002, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000000c40))
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/key-users\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(r6, &(0x7f00000022c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002280)={&(0x7f0000002180)={0xf8, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "1af340da3c762c0108dfb61a3598"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "2b48bb2add"}, @NL80211_ATTR_KEY={0x88, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "6220eb939f96f2ee3d40c768b0"}, @NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "be1200583c6e6df1ce80b3a080"}, @NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0xc, 0x4, "db4bddb0eba3853b"}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ca81cc7a2a"}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4)
r7 = fsmount(0xffffffffffffffff, 0x0, 0x2)
setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000002300), 0x4)
openat$cgroup_ro(r5, &(0x7f0000002340)='cgroup.kill\x00', 0x0, 0x0)

03:32:23 executing program 3:
ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b)
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
select(0x40, &(0x7f0000000000)={0x8, 0x3, 0x7fff, 0x8, 0x101}, &(0x7f0000000040)={0x2, 0x9, 0x101, 0x0, 0x20, 0x0, 0x100, 0x68b}, &(0x7f0000000080)={0x4, 0x6, 0x5, 0x7, 0x400, 0x401, 0x2, 0x2}, &(0x7f0000000100)={r0, r1/1000+10000})
ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f0000000140)={0x4, 0xe})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xa4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x200080d4}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000300)={0x10000, 0x15})
select(0x40, &(0x7f0000000340)={0x3, 0x5, 0x8000, 0x552, 0x3f, 0x27d, 0x4, 0x9}, &(0x7f0000000380)={0x40, 0x80000000, 0x2141, 0x8, 0x2, 0x7f, 0x0, 0x1}, &(0x7f00000003c0)={0x6, 0x1, 0x4, 0x1, 0xffffffffffffffff, 0x40, 0x5, 0x2}, &(0x7f0000000400)={0x0, 0xea60})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000580)={&(0x7f0000000440), 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xac, 0x0, 0xb08, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x45}}}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xe}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x9}]}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7b83}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x80}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfb2}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x1000}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffeb}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x69}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x80000000, 0x71}}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x8}, @NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x5}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x88d0)
openat$cgroup_int(r2, &(0x7f00000005c0)='cpuset.cpus\x00', 0x2, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4001)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/tty/drivers\x00', 0x0, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, &(0x7f0000000740))
ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000780)={{0x100, 0x3}, {0x7, 0x6c3e}, 0x7})
fsmount(r3, 0x1, 0x72)
ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000007c0)={{0x3f, 0x7ff}, {0x1, 0x74}, 0x3, 0x1})
openat$cgroup_devices(r3, &(0x7f0000000800)='devices.allow\x00', 0x2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000880)={'\x00', 0x8, 0x2, 0x1})
semtimedop(0x0, &(0x7f0000000900)=[{0x0, 0x5, 0x1000}, {0x4, 0x3, 0x1800}, {0x4}, {0x2, 0x1ff, 0x1000}], 0x4, &(0x7f0000000940)={0x77359400})

03:32:23 executing program 4:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000014}, 0x10)
r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@nfc, &(0x7f0000000200)=0x80)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000280)={{0xffffffffffffffff, 0x8000}, {0x3, 0x8000}, 0xe59, 0x1})
r2 = socket(0x28, 0x3, 0xf150)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_NOACK_MAP(r2, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x53}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x401}]}, 0x30}}, 0x4048004)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x20000011)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000640))
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
recvmsg(r5, &(0x7f0000000980)={&(0x7f0000000680)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f0000000700)=""/201, 0xc9}, {&(0x7f0000000800)=""/105, 0x69}], 0x2, &(0x7f00000008c0)=""/137, 0x89}, 0x1)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r4)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x40}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b40), r4)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r7, 0x800, 0x7, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40891)
sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x211f000}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000045}, 0x48000)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000d80)=[@mss={0x2, 0xfffff19c}, @window={0x3, 0x983, 0x1}, @window={0x3, 0x8}], 0x3)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000e40)={'syztnl0\x00', &(0x7f0000000dc0)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x1, 0x9, 0x4, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0x0, 0x1f}})

03:32:23 executing program 5:
r0 = getpid()
r1 = fork()
clone3(&(0x7f0000000240)={0x2000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x20}, &(0x7f00000000c0)=""/106, 0x6a, &(0x7f0000000140)=""/152, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0, r1], 0x5}, 0x58)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0)
r3 = getpid()
setrlimit(0x1, &(0x7f0000000300)={0x81, 0x7})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x2000, 0x0)
openat$cgroup_subtree(r4, &(0x7f0000000380), 0x2, 0x0)
r5 = getpid()
clone3(&(0x7f00000005c0)={0x10200, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440), {0x12}, &(0x7f0000000480)=""/173, 0xad, &(0x7f0000000540)=""/23, &(0x7f0000000580)=[r3, r0, r5], 0x3, {r2}}, 0x58)
r6 = openat$cgroup(r4, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0)
openat$cgroup_subtree(r6, &(0x7f0000000680), 0x2, 0x0)
ioctl$PTP_PEROUT_REQUEST(r4, 0x40383d03, &(0x7f00000006c0)={{0xffffffff, 0x7}, {0xc74, 0x2}, 0x0, 0x1})
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x98, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x98}, 0x1, 0x0, 0x0, 0x90}, 0x4008004)
perf_event_open(&(0x7f00000008c0)={0x0, 0x80, 0x6, 0x8, 0x3, 0x90, 0x0, 0x8000, 0x80, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x2, 0x7f}, 0x0, 0xac5, 0x3, 0x1, 0x1000, 0x9, 0x1, 0x0, 0x5, 0x0, 0x401}, r1, 0x9, 0xffffffffffffffff, 0x3)
r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x20, 0xc4, [{{0x9, 0x4, 0x0, 0x30, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0x2, 0x3f}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0x8, 0x6}}]}}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000980)={0xa, 0x6, 0x250, 0x2e, 0x20, 0xdd, 0x20, 0x8}, 0x17, &(0x7f00000009c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x9, 0x8, 0x101, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x3f}]}, 0x8, [{0x25, &(0x7f0000000a00)=@string={0x25, 0x3, "de8fc5df3d3d1e8a7c4c7965979b1cb85348702ddfab5bd2a9eb702de51c355adfdb1c"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x813}}, {0xa5, &(0x7f0000000a80)=@string={0xa5, 0x3, "75d34fe0883fb6090436402b8b752d78962caf1aeff05492aa27a8d0342be34eb3b188d1061ccdcee2f3b1dcfdd585c65364aedbdbc9927ad861d26a7e31e25354aad19d22da82548439a0112710d3a730cb3776139583400d80760334bb02cbb2ac1d91d8760d4dc0fdeed26caa98528b93b31341ce826ee2b27a10bcb221a05cb938298e210d1070a3f579f350aea9dbecd581965db074d9e2086a993446ac57f651"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x411}}, {0x39, &(0x7f0000000bc0)=@string={0x39, 0x3, "e0d7d4247770ea1b0654a78991a035866890fb64dbc2be6ab08198f3703658137d7672a5edf90c85d2ab103f65faf7372228afe21d9fed"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x412}}]})
syz_usb_control_io$printer(r8, &(0x7f0000000dc0)={0x14, &(0x7f0000000d00)={0x0, 0x21, 0x4b, {0x4b, 0x6, "5e4e1212c5d5bcdbcf26063efddac15c5a114d34df5295ba748eade4c2df853df91669881c32ed2f313885439b26a677bd486fb3d432b9a580d743dca541c0f93621b3b226dbaa637d"}}, &(0x7f0000000d80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41c}}}, &(0x7f0000001080)={0x34, &(0x7f0000000e00)={0x0, 0xd, 0xcb, "b95f56471b1e99fd4584b80eac770605183ac4b4fb132d0d8b1e204b6c4fe341ccd7af439490b1d784fee0bf7c38909fffec5d66ba66ed7c8ba0a915d4176cc60a441e9630a59a9a75ac7dbccb1219b89a20a0db2a3d0ef00586619b4aead83e40cbd48d6ed57f9597db85e4a46d24a62cdca29599d7247ff4228554d1a4819ed57accee641bace6190507999583871562ddbebefd4555b41cabae16f5aca167475fbbc0e7b539a012209343b651ed16803fb19db5884372475e8dc1b6c9f90f3eb9e7977a21c35dbccf3d"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x65}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000000f80)={0x20, 0x0, 0x4c, {0x4a, "7aa8b32346817921a9b99c99f16714855cf44a22f23f7118af382f5c5e517eb35ed69e6672ba70c8daf96b85c25b65a3623cf0584c097eefec53c5e0943769977d7d22d3e61db865d710"}}, &(0x7f0000001000)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000001040)={0x20, 0x0, 0x1, 0x9}})
wait4(r5, 0x0, 0x1, &(0x7f00000010c0))
wait4(r1, &(0x7f0000001180), 0x2, &(0x7f00000011c0))

03:32:23 executing program 6:
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.swap.events\x00', 0x0, 0x0)
getresuid(&(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), &(0x7f0000000180)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1240040, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x935}}, {@aname={'aname', 0x3d, '$^:]'}}], [{@fowner_gt={'fowner>', r3}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x80010, r4, 0x10000000)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40408c4)
timerfd_gettime(r0, &(0x7f0000000400))
r6 = msgget(0x2, 0x10)
msgctl$IPC_SET(r6, 0x1, &(0x7f0000000440)={{0x3, r3, 0x0, r2, 0xee01, 0x1, 0x81}, 0x0, 0x0, 0x9, 0x1, 0x800, 0x6, 0x0, 0x6, 0x4, 0x100})
openat$cgroup_subtree(r1, &(0x7f00000004c0), 0x2, 0x0)
socket(0x8, 0x4, 0x0)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x10000000)
syz_io_uring_submit(0x0, r7, &(0x7f0000000500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x1101, 0x1, {0x3}}, 0x3)
r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0x8000000)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x120010, r0, 0x10000000)
syz_io_uring_submit(r8, r9, &(0x7f0000000540)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x4007, @fd_index, 0x7, 0x1, 0x6, 0x0, 0x1}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff)

03:32:23 executing program 7:
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000000)='dirsync\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1e000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@loose}, {@version_9p2000}, {@version_9p2000}, {@version_L}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}})
r1 = fsmount(0xffffffffffffffff, 0x1, 0x85)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8020}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xcc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x21}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x408, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x64, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x20008080)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x108, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r4)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x70, r8, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x17f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40800)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00'})
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f0000000cc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x160, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xc4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a7e7603e696720bc1227869a360fdc4b7012fc7d3c9de0c46fdfd9a984950293"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d227fefa2c9c1d3c654b875c3cf609faf03b1519ef004888701efecace8ac2ac"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "61e04f7bfaf7c859ebb254cc2b0f2d0b472855abef5fee1ac8292ab5a7ea4060"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f1bac32d7de70f2abf3976a78e733db3e2192575967ee8923e01b2f30fbaf765"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}]}]}, @NL802154_ATTR_SEC_KEY={0x74, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c9346e5e77114c3c4935fc00ac24d63a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "867136e2f8428b5b8742fb63d3367e4dfa44bb04a932be18633f3a9b320c182c"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "29cba2f313b3caa3d9d6311b41732efece4b53039d1ec4c158180c7e8b691dd8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c88b93391ba26850238d173e7c8e0ebc"}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x8000}, 0x4026800)

[  115.753425] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  115.758459] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  115.763578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  115.771541] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  115.780587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  115.956932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.961315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.966333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.971973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.977492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.028969] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.036979] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.044538] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.054903] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.067492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.072083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  116.078692] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  116.081467] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  116.096861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  116.100669] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  116.141791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  116.145572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  116.159493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  116.172625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  116.185744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  116.252198] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  116.254780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  116.257438] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  116.261909] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  116.266698] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  116.274571] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  116.334102] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  116.338524] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  116.340676] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  116.352485] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  116.363692] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  116.366900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  116.381318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  116.424494] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  116.430796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  117.839839] Bluetooth: hci0: command tx timeout
[  118.030126] Bluetooth: hci1: command tx timeout
[  118.159100] Bluetooth: hci3: command tx timeout
[  118.159707] Bluetooth: hci2: command tx timeout
[  118.287097] Bluetooth: hci4: command tx timeout
[  118.478071] Bluetooth: hci6: command tx timeout
[  118.542070] Bluetooth: hci5: command tx timeout
[  118.606150] Bluetooth: hci7: command tx timeout
[  119.886122] Bluetooth: hci0: command tx timeout
[  120.079322] Bluetooth: hci1: command tx timeout
[  120.207410] Bluetooth: hci2: command tx timeout
[  120.207838] Bluetooth: hci3: command tx timeout
[  120.334054] Bluetooth: hci4: command tx timeout
[  120.526340] Bluetooth: hci6: command tx timeout
[  120.592256] Bluetooth: hci5: command tx timeout
[  120.655210] Bluetooth: hci7: command tx timeout
[  121.934961] Bluetooth: hci0: command tx timeout
[  122.127323] Bluetooth: hci1: command tx timeout
[  122.254428] Bluetooth: hci3: command tx timeout
[  122.254859] Bluetooth: hci2: command tx timeout
[  122.384042] Bluetooth: hci4: command tx timeout
[  122.575359] Bluetooth: hci6: command tx timeout
[  122.639328] Bluetooth: hci5: command tx timeout
[  122.703186] Bluetooth: hci7: command tx timeout
[  123.983287] Bluetooth: hci0: command tx timeout
[  124.175477] Bluetooth: hci1: command tx timeout
[  124.303236] Bluetooth: hci2: command tx timeout
[  124.303674] Bluetooth: hci3: command tx timeout
[  124.430293] Bluetooth: hci4: command tx timeout
[  124.623056] Bluetooth: hci6: command tx timeout
[  124.689028] Bluetooth: hci5: command tx timeout
[  124.751315] Bluetooth: hci7: command tx timeout
[  175.932845] syz-executor.6 (286) used greatest stack depth: 25024 bytes left
[  176.006804] syz-executor.0 (284) used greatest stack depth: 24912 bytes left
[  176.137065] syz-executor.5 (287) used greatest stack depth: 24640 bytes left
[  178.460597] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  178.463203] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  178.470066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  178.474952] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  178.479292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  178.562374] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  178.567505] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  178.578902] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  178.583886] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  178.595125] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  178.604973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  178.614851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  178.647726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  178.671891] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  178.678693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  178.718613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  178.724166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  178.729049] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  178.751416] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  178.790376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  178.800888] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  178.831077] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  178.832776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  178.836392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  178.837769] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  178.838694] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  178.844686] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  178.852281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  178.874725] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  178.878951] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  178.880906] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  178.889250] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  178.900058] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  178.913284] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  178.920619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  178.926485] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  178.943666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  178.947255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  178.967022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  178.988665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  180.560079] Bluetooth: hci0: command tx timeout
[  180.686154] Bluetooth: hci2: command tx timeout
[  180.814111] Bluetooth: hci1: command tx timeout
[  180.943454] Bluetooth: hci3: command tx timeout
[  180.944303] Bluetooth: hci4: command tx timeout
[  181.006240] Bluetooth: hci5: command tx timeout
[  181.006763] Bluetooth: hci7: command tx timeout
[  181.070095] Bluetooth: hci6: command tx timeout
[  182.606244] Bluetooth: hci0: command tx timeout
[  182.736044] Bluetooth: hci2: command tx timeout
[  182.862200] Bluetooth: hci1: command tx timeout
[  182.990188] Bluetooth: hci4: command tx timeout
[  182.990740] Bluetooth: hci3: command tx timeout
[  183.054283] Bluetooth: hci5: command tx timeout
[  183.054724] Bluetooth: hci7: command tx timeout
[  183.119045] Bluetooth: hci6: command tx timeout
[  184.654405] Bluetooth: hci0: command tx timeout
[  184.783200] Bluetooth: hci2: command tx timeout
[  184.911243] Bluetooth: hci1: command tx timeout
[  185.038269] Bluetooth: hci3: command tx timeout
[  185.038746] Bluetooth: hci4: command tx timeout
[  185.102153] Bluetooth: hci5: command tx timeout
[  185.102607] Bluetooth: hci7: command tx timeout
[  185.167056] Bluetooth: hci6: command tx timeout
[  186.702348] Bluetooth: hci0: command tx timeout
[  186.830089] Bluetooth: hci2: command tx timeout
[  186.958342] Bluetooth: hci1: command tx timeout
[  187.086236] Bluetooth: hci4: command tx timeout
[  187.086789] Bluetooth: hci3: command tx timeout
[  187.151184] Bluetooth: hci7: command tx timeout
[  187.151610] Bluetooth: hci5: command tx timeout
[  187.214332] Bluetooth: hci6: command tx timeout
[  240.794152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  240.797621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  240.800798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  240.809173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  240.813956] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  240.886897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.890906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.893173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.898296] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.902491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  241.067555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  241.083422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  241.086406] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  241.090278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  241.098814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  241.101399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  241.106497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  241.113724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  241.118755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  241.120813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  241.188830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  241.209410] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  241.226358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  241.252584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  241.305712] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  241.306877] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  241.309811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  241.311672] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  241.312362] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  241.313878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  241.314232] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  241.316843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  241.321929] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  241.324865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  241.326904] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  241.329891] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  241.352406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  241.366444] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  241.405783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  241.410141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  242.894110] Bluetooth: hci0: command tx timeout
[  242.958265] Bluetooth: hci1: command tx timeout
[  243.150171] Bluetooth: hci2: command tx timeout
[  243.214123] Bluetooth: hci3: command tx timeout
[  243.406218] Bluetooth: hci5: command tx timeout
[  243.406277] Bluetooth: hci4: command tx timeout
[  243.471154] Bluetooth: hci7: command tx timeout
[  243.471208] Bluetooth: hci6: command tx timeout
[  244.942078] Bluetooth: hci0: command tx timeout
[  245.006352] Bluetooth: hci1: command tx timeout
[  245.198770] Bluetooth: hci2: command tx timeout
[  245.263026] Bluetooth: hci3: command tx timeout
[  245.454260] Bluetooth: hci5: command tx timeout
[  245.454610] Bluetooth: hci4: command tx timeout
[  245.518245] Bluetooth: hci6: command tx timeout
[  245.519747] Bluetooth: hci7: command tx timeout
[  246.990302] Bluetooth: hci0: command tx timeout
[  247.054359] Bluetooth: hci1: command tx timeout
[  247.247241] Bluetooth: hci2: command tx timeout
[  247.312168] Bluetooth: hci3: command tx timeout
[  247.502225] Bluetooth: hci5: command tx timeout
[  247.502701] Bluetooth: hci4: command tx timeout
[  247.566124] Bluetooth: hci7: command tx timeout
[  247.566637] Bluetooth: hci6: command tx timeout
[  249.039127] Bluetooth: hci0: command tx timeout
[  249.102185] Bluetooth: hci1: command tx timeout
[  249.294112] Bluetooth: hci2: command tx timeout
[  249.358109] Bluetooth: hci3: command tx timeout
[  249.550341] Bluetooth: hci4: command tx timeout
[  249.550781] Bluetooth: hci5: command tx timeout
[  249.616148] Bluetooth: hci6: command tx timeout
[  249.616651] Bluetooth: hci7: command tx timeout
[  303.139959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  303.144434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  303.148457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  303.156374] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  303.160341] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  303.417451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  303.427676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  303.430749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  303.443846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  303.451527] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  303.550718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  303.553324] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  303.572134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  303.586264] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  303.589396] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  303.595727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.615540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  303.636692] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  303.671426] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  303.674538] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  303.679530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  303.683791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  303.685424] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  303.714719] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  303.740643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  303.745272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  303.756298] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  303.762444] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  303.767482] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  303.787970] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  303.788135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  303.815591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  303.827585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.850314] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.910904] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.912621] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  303.945918] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  303.952319] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.964513] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  303.989490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  305.231469] Bluetooth: hci0: command tx timeout
[  305.486205] Bluetooth: hci1: command tx timeout
[  305.743392] Bluetooth: hci3: command tx timeout
[  305.806498] Bluetooth: hci2: command tx timeout
[  305.871036] Bluetooth: hci4: command tx timeout
[  305.998290] Bluetooth: hci5: command tx timeout
[  306.062775] Bluetooth: hci7: command tx timeout
[  306.062817] Bluetooth: hci6: command tx timeout
[  307.279469] Bluetooth: hci0: command tx timeout
[  307.534099] Bluetooth: hci1: command tx timeout
[  307.791081] Bluetooth: hci3: command tx timeout
[  307.854229] Bluetooth: hci2: command tx timeout
[  307.918176] Bluetooth: hci4: command tx timeout
[  308.046151] Bluetooth: hci5: command tx timeout
[  308.110119] Bluetooth: hci7: command tx timeout
[  308.110303] Bluetooth: hci6: command tx timeout
[  309.326123] Bluetooth: hci0: command tx timeout
[  309.582467] Bluetooth: hci1: command tx timeout
[  309.839040] Bluetooth: hci3: command tx timeout
[  309.902360] Bluetooth: hci2: command tx timeout
[  309.966317] Bluetooth: hci4: command tx timeout
[  310.094079] Bluetooth: hci5: command tx timeout
[  310.158480] Bluetooth: hci7: command tx timeout
[  310.159088] Bluetooth: hci6: command tx timeout
[  311.377101] Bluetooth: hci0: command tx timeout
[  311.630231] Bluetooth: hci1: command tx timeout
[  311.886080] Bluetooth: hci3: command tx timeout
[  311.951114] Bluetooth: hci2: command tx timeout
[  312.014380] Bluetooth: hci4: command tx timeout
[  312.144045] Bluetooth: hci5: command tx timeout
[  312.207086] Bluetooth: hci6: command tx timeout
[  312.207545] Bluetooth: hci7: command tx timeout
[  365.535533] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  365.540539] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  365.545262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  365.552164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  365.559544] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  365.733947] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  365.740818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  365.747401] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  365.757647] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  365.762811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.066040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  366.077740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  366.081285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  366.090260] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  366.095402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  366.116530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  366.120118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  366.131905] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  366.141340] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  366.151556] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  366.188310] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  366.195547] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  366.209061] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  366.227540] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  366.233461] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  366.261673] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  366.264653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  366.272902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  366.286481] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  366.303589] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  366.407587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.494597] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.498845] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.572409] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.626738] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.845661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  366.951374] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  366.976187] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  367.055224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  367.083946] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  367.630163] Bluetooth: hci0: command tx timeout
[  367.822295] Bluetooth: hci1: command tx timeout
[  368.142341] Bluetooth: hci3: command tx timeout
[  368.334275] Bluetooth: hci2: command tx timeout
[  368.398303] Bluetooth: hci5: command tx timeout
[  368.526120] Bluetooth: hci4: command tx timeout
[  368.782069] Bluetooth: hci7: command tx timeout
[  369.230523] Bluetooth: hci6: command tx timeout
[  369.678096] Bluetooth: hci0: command tx timeout
[  369.870365] Bluetooth: hci1: command tx timeout
[  370.190100] Bluetooth: hci3: command tx timeout
[  370.382098] Bluetooth: hci2: command tx timeout
[  370.446262] Bluetooth: hci5: command tx timeout
[  370.575215] Bluetooth: hci4: command tx timeout
[  370.832055] Bluetooth: hci7: command tx timeout
[  371.278098] Bluetooth: hci6: command tx timeout
[  371.726173] Bluetooth: hci0: command tx timeout
[  371.918203] Bluetooth: hci1: command tx timeout
[  372.238471] Bluetooth: hci3: command tx timeout
[  372.431029] Bluetooth: hci2: command tx timeout
[  372.495125] Bluetooth: hci5: command tx timeout
[  372.622126] Bluetooth: hci4: command tx timeout
[  372.878123] Bluetooth: hci7: command tx timeout
[  373.326244] Bluetooth: hci6: command tx timeout
[  373.775212] Bluetooth: hci0: command tx timeout
[  373.966088] Bluetooth: hci1: command tx timeout
[  374.286214] Bluetooth: hci3: command tx timeout
[  374.478714] Bluetooth: hci2: command tx timeout
[  374.542074] Bluetooth: hci5: command tx timeout
[  374.670463] Bluetooth: hci4: command tx timeout
[  374.926071] Bluetooth: hci7: command tx timeout
[  375.374198] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
03:37:24  Registers:
info registers vcpu 0
RAX=0000000000000001 RBX=ffffffff81aece44 RCX=ffff88802f1af71c RDX=1ffff11005e35f04
RSI=ffffffff85c1cc40 RDI=ffffffff81aece44 RBP=ffffffff81aece44 RSP=ffff88802f1af788
R8 =ffffffff867fc9f8 R9 =ffff88802f1af808 R10=000000000003b53d R11=0000000000012b30
R12=ffff88802f1af890 R13=0000000000000000 R14=ffff8880154c9b80 R15=ffffffff81cd9e22
RIP=ffffffff8142fa63 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5630000 00000000 00000000
LDT=0000 fffffe4400000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000556405962080 CR3=00000000071f7000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffffffffffffffffffff XMM01=2f7273752f3a6e6962732f3d48544150
XMM02=000000000000000000ff000000000000 XMM03=00000000000000000000ff00000000ff
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=5f45424f5250444f4d0068563a623a6b XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff84ac7b0d RDX=ffff888016721b80
RSI=0000000000000003 RDI=0000000000000005 RBP=ffffffff852f2720 RSP=ffff888016ab78f0
R8 =0000000000000001 R9 =ffffed1002ce4370 R10=0000000000000001 R11=0000000000000001
R12=0000000000000001 R13=0000000000000005 R14=0000000000000003 R15=ffff888016ab7a58
RIP=ffffffff81738977 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e5730000 00000000 00000000
LDT=0000 fffffe7c00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcc9f37e28 CR3=0000000033460000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000