syzkaller login: [   67.374134] scp (238) used greatest stack depth: 24704 bytes left
Warning: Permanently added '[localhost]:30519' (ECDSA) to the list of known hosts.
2024/10/27 23:48:01 fuzzer started
2024/10/27 23:48:02 dialing manager at localhost:45639
[   71.439670] cgroup: Unknown subsys name 'net'
[   71.595684] cgroup: Unknown subsys name 'cpuset'
[   71.681069] cgroup: Unknown subsys name 'rlimit'
2024/10/27 23:48:20 syscalls: 202
2024/10/27 23:48:20 code coverage: enabled
2024/10/27 23:48:20 comparison tracing: enabled
2024/10/27 23:48:20 extra coverage: enabled
2024/10/27 23:48:20 setuid sandbox: enabled
2024/10/27 23:48:20 namespace sandbox: enabled
2024/10/27 23:48:20 Android sandbox: enabled
2024/10/27 23:48:20 fault injection: enabled
2024/10/27 23:48:20 leak checking: enabled
2024/10/27 23:48:20 net packet injection: enabled
2024/10/27 23:48:20 net device setup: enabled
2024/10/27 23:48:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/10/27 23:48:20 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/10/27 23:48:20 USB emulation: enabled
2024/10/27 23:48:20 hci packet injection: enabled
2024/10/27 23:48:20 wifi device emulation: enabled
2024/10/27 23:48:20 802.15.4 emulation: enabled
2024/10/27 23:48:20 fetching corpus: 0, signal 0/0 (executing program)
2024/10/27 23:48:22 starting 8 fuzzer processes
23:48:22 executing program 0:
read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x9, 0x3, 0x1, 0x1}, 0x8)
ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f00000000c0))
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000140)=0x4)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)
r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x2080, 0x0)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0xa0e, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000002c0), 0x4)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
r2 = socket$inet6(0xa, 0x6, 0x3)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000300)=0x4, 0x4)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0xa0c40, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@cache_none}, {@access_user}, {@dfltuid}, {@cache_fscache}, {@version_u}, {@msize={'msize', 0x3d, 0x3}}], [{@obj_role={'obj_role', 0x3d, '^!['}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@hash}, {@smackfshat={'smackfshat', 0x3d, 'syz1\x00'}}, {@permit_directio}, {@appraise_type}]}})
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x24040000)
read$rfkill(r0, &(0x7f0000000600), 0x8)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xd0f)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x0, 0x3, 0x19, 0x0, "be709fca5629dd1906ef001f39eec91bcd11bfd07415647b311bedeb64f265151033db81d88f607b0f43aecb199c6485f40014607e1f42ead54e67b3fb76ca54", "cacee8c5c9d383eff7e33f26c3862fdcffa56f62bf829f821f313576c76e972cce70b6e63ad5601e34919fec2281b259afa98acca32a5e170d6d05783c472f79", "1a9bb41505cef67b0de2fdbc5db0e488fc240deb34d189641be6585a9f798c46", [0xfb, 0xffff]})
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0)

23:48:22 executing program 4:
sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x44}}, 0xc080)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040084)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r3)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20040038}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40804}, 0x811)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00'})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c051}, 0x40004)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cee272c}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50ae6273}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35cbe280}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4d023e0a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x114b4d82}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23ece50d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c03}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x378d26f5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62004332}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x65f0b5a7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x34, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x77}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9509f3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53ec7f7e}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x880}, 0x8000010)
sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)

23:48:22 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3d}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000842}, 0x20000004)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r0)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, r3, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1143}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8090}, 0x4008090)
syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r1)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x254, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfbd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x313}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6782}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa5e}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffe0}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7b4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2bf89258}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf67}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x27}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x138b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r1)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x134, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x100, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xf0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3ff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x134}, 0x1, 0x0, 0x0, 0x800}, 0x4008000)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r2)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a80)={'wpan1\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a00), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090)
sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x24, r7, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x80000)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000e40), r0)
sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x154, r8, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf4, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x85}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17547a57}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69337c8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f534e0f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2868c6bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x228d1c11}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb5b9b7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x176a1b3e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e56eb05}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fedf4f9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x91db3e3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bb5b145}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x327f97bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x75e5eea7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x686371d8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0xf9191750bb45c92e}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x154}, 0x1, 0x0, 0x0, 0x4000}, 0x4005)
sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40008014)

[   90.742015] audit: type=1400 audit(1730072902.199:7): avc:  denied  { execmem } for  pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
23:48:22 executing program 2:
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1800}, 0x20000844)
r0 = socket(0x3, 0x80000, 0x9)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg0\x00'})
syz_open_dev$char_usb(0xc, 0xb4, 0x4)
setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0xfffff8e2, 0x4)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0)
sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffff0a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20080)
r2 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r0)
r3 = syz_open_dev$loop(&(0x7f0000000300), 0x1c4f938, 0x100)
ioctl$LOOP_SET_FD(r3, 0x4c00, r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x30008000)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000440), r0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r4, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000600)={0x270, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3a5ded1d}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc2a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb51b}]}, @TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x25, 0x3, "9618c17f50520edd100f633d9884bee1383eb107712a9988a03d1ff86ae44e8376"}, @TIPC_NLA_NODE_ID={0x22, 0x3, "854026175d6f7f373247dc0171a50a053e394dd2cad7a098666cf1b359f6"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x63, 0x3, "06da7b8869c84fbabd541f2540c57e13d36d94c25207790e9d7c2e3efe825ddac4e921c95b30eb6c90d0885dc9b934cf7092d478bd80b1b93f1fc90e2e34b5299b8af44ef41eee15f60373165eb34a591e31416af8b5248c29c591913306bc"}]}, @TIPC_NLA_BEARER={0x100, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8b7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe865}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xad4f}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x80000000, @mcast1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_0\x00'}}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
r5 = socket(0x2a, 0x2, 0x180)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x17, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x40041}, 0x4050080)
socketpair(0x25, 0x6, 0x7f, &(0x7f0000000b80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x44, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x47}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4001)

23:48:22 executing program 3:
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x48001)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000810}, 0x810)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb42}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x4041)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl2\x00', <r2=>0x0, 0x2f, 0xe7, 0xff, 0x3, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x700, 0x1, 0x8, 0x40}})
sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001400)={&(0x7f0000000500)={0xefc, r1, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0xeac, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @multicast2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xc89, @mcast2, 0x4}}]}, {0x3b0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6c6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x20, @remote, 0x7ff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4a591aea6c721bae2b460267ef681968b593ad33900b9c8afee313397ff2a37b"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x330, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x40}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @mcast1, 0x401}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x3, @local, 0x10000}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @local, 0x8000}}]}, {0x8b0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3ff}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1ff, @loopback, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @mcast1, 0x80}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x350, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "6db42b698e2164ca71a26929e65133be81126325421c4353dfb86a47f0ca8e9b"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "09a35020560305d64238166983cde5801849f153b028b487cd9f32bfd2afcd09"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "75b1fc8fd025b2c04b5a09079751ffea59a5efe616c521e5e57ff55782dbc1fc"}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @loopback, 0x3ff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7e0b133099ba0275281b2d8540af69d23822a327b61e495f3db3ffbf5226c03b"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x100, @private1, 0xffffffbe}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "04728b54a0bace65245c469e838487eef9d40a03157bd8db4c4ab0327cfb8333"}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff97}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private2, 0x10}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8fe014e55b5799ceca026d019a5f047891102d39c7f60ac5271af2a82bf9b731"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0xefc}, 0x1, 0x0, 0x0, 0x20004054}, 0x8005)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000014c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x3c, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x4)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, r4, 0x61f55bd22576d18a, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}}, 0x8000)
r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001700), 0x8100, 0x0)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001780), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000001840)={&(0x7f0000001740), 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x2c, r6, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048004}, 0x4040010)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, r3, 0x409, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001980), 0xa0000, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(r7, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0xa800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x38, r6, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x43}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x41}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x24048000)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001b00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x20, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c001)
sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x20}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x81}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)

23:48:22 executing program 5:
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x40, 0xa, 0x85, {0x85, 0x30, "e69983a80b28443d5630a2ca1cfabf78d2902c93172b7038ba15f33610a016032ced2a6c626fb109564a2b259605c53376ee4f78e21c3ab42475a13de894a801ce0ef42f21db7043ce79da26724f80fca4d9e3788dbee0ec8969a81d77542a179ccb5114c40c32938a254e422b96ccb083cc95485c6af513699f4b5811b0fe8488c4b5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x72, @string={0x72, 0x3, "442b2795d2327aaf23972cd21a78d6c775de34134202bc9df70c7d4f1cfa6ee700a5347a9e86c805269008686b51d9168d3778b6f34a83f64a259d61a276ab423ce39a6e79c781726ecb28698bad4bd6a019b57b808fdfd3072c04cfc2c3e0a2447681f4694fa110cdb5671d88486966"}}, &(0x7f0000000140)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x1a, "70f1544a9c134d495884bf2a5dd72b63"}, @ssp_cap={0xc, 0x10, 0xa, 0x2a, 0x0, 0x7, 0x0, 0x9}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0x7, 0x80, 0x6, 0x7}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x4, 0x80, 0xa6, "720c124a", "04b71f61"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x6, 0x6, 0xff, 0x8, 0x923}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0x0, 0x10, 0xa5, "fb101256f32f1203df722d150857ddf83caef303d6e3ca625820faa30a9746609dc794e5b15fee34f293dd613cba025c7986644172252d58befd0dfb1f47e2f00edc1b23b10f962894de3ca3da743b50e6f6fd0e0aeffbd11b6b8ac76be38a359c36fbf07acf3e673b2f4b05b9bf3a69a60ca4af892520d0507e007fc86404228eecd9794f1862c368fb8229ac2b149a7248a1397c0cfdcc90f757f811d72faf7ab0df5996"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0xa0, 0x40, [0xfff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x7e95}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x20}, &(0x7f0000000480)={0x40, 0xb, 0x2, "b505"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, &(0x7f0000000580)={0x40, 0x19, 0x2, "a76a"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x4080}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x1f}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000680)={0x40, 0x21, 0x1}})
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000880)={0x14, &(0x7f0000000780)={0x0, 0xc, 0x9b, {0x9b, 0x10, "6e4440a62e8672ec2f3389e4adacd327a0012c90977bdee2d85513c218eb1d8e17735a4dab32f8c13f21d7d5b89381218ddc71b5137d6c2ea0283801ea197b70d8f2b1ce1c271e193543e4940262f3067e1eda25a30b40f9aaa094633b831556a09a954636f6f80d0ce90859bfaf02bc6c938a6b00de679520a0614077a51a5b65c751d1dbd11857f1e0b28d33d50c22ec7525383e9439ec9e"}}, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1407}}}, &(0x7f0000000b00)={0x44, &(0x7f00000008c0)={0x20, 0x13, 0x3d, "180be2f7286748a6cae2a172f26337f8272471dbda40801b4851d36cc957e408022f61dc9dd8ddad38b400aec88a7e1cd73faffb411a1406684aefd458"}, &(0x7f0000000940)={0x0, 0xa, 0x1}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000009c0)={0x20, 0x81, 0x2, "cfe8"}, &(0x7f0000000a00)={0x20, 0x82, 0x2, "c7c2"}, &(0x7f0000000a40)={0x20, 0x83, 0x3, "1951e4"}, &(0x7f0000000a80)={0x20, 0x84, 0x1, "c9"}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "c9ae59"}})
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x20, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000e00)={0x14, &(0x7f0000000cc0)={0x40, 0xe, 0x5d, {0x5d, 0x37, "b1c0be63f1971fa590bb9f7d8babfbc59b4ce320545a09084d1b54a3808698a24fdb51e0bcf50341790d4f5c3a4e388d34c0bde517b31aa34930ef3d73e3c5ca3c540ba42a4e71fb4af86479181bf835b914672d86e9825853582d"}}, &(0x7f0000000d40)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "a1078600247d774932f376378a24dc945283da5fec363a36f604be76b607fcd22209a998d1f2d84f7a4bfe0128512a043de6e2fd531f1225b1e4405699db7d6a62d017672d4500420013594561ee02aa7d6c9ad60e00866598a19eabce4ad23b7eff18f431bd28133ca2cb8712b2162e20f741c466037ddf97eba61374941e3b4220f9667b76d85ddb314bc932d6ac79f73e165172ebfce1a044"}}}, &(0x7f0000001080)={0x34, &(0x7f0000000e40)={0x40, 0x30, 0x81, "0a6677c8a893a0e918e3a982fe84c86cd83811dc2d59fd600e42087a83488d5bf421c88b2d963254b4ca6ef58623a18905a36c13ce7b1574dc9875b96885ab1755265f8790d80829fbc13562178e33a830aa4db4d10ca287f91420aa87cee72afafe6db392285219f1d9ba5f77e1d70aaa1f3f1562adaf5d1a288b6f79df1d38c9"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000f40)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000f80)={0x20, 0x0, 0x5b, {0x59, "5b5c42266970f7f4e7de58d4618b183a4a22bf1a9719f7c5bc353ce1be114d027161eff61d3f9b3b5f7e1b62618c1d5da4489ce0c5e3503b856dd3700f9ca24c7d8b9263db8697111085c72afbd7af03a75948b0b291ad7020"}}, &(0x7f0000001000)={0x20, 0x1, 0x1, 0xfa}, &(0x7f0000001040)={0x20, 0x0, 0x1, 0x2}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001240)={0x2c, &(0x7f00000010c0)={0x20, 0x5, 0x47, {0x47, 0x3, "3bbed11916556a3b8a695457bfb8acdc84053d0825b1445ca96b62a8ff20b16426ce3fe3437cb62133e1a220deedad579e5795fa22281029e3c38477bc4790274f7726718f"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000001180)={0x0, 0xf, 0xb, {0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}, &(0x7f00000011c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x3, 0x1, 0x1, "3418c0f5", "9b1b6de4"}}, &(0x7f0000001200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x6, 0x20, 0x7f, 0x0, 0xfff}}}, &(0x7f0000001740)={0x84, &(0x7f0000001280)={0x20, 0x13, 0xc4, "bee3e46b927783c062ac2199cc4236615e355b80f6e8987a1bfad3edbf3add08989cc3136262be53e7c2b573452f06a463e8ec1c987b8dbbb4058ad4f7f3821a490dfc61e8e7b0e18c2ffc0f4037de3c2c8388bf3ee2655ce825e53cde42287fd1898e0993404ed9e7ace5cba7bc6ffab964d20ebbe1dc7ceea097744f007d12df01e5d5f4cbc5b8f1c7a6a4c8f8872ddafe2b1a148f46e9f8e05a995ff53e1f439a39353e684fb66b88a26f5a7ecd01a9f8818ce85861126d165c9c833e7d1c1c1b8611"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000001440)={0x20, 0x0, 0x4, {0x120, 0x40}}, &(0x7f0000001480)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000014c0)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001500)={0x40, 0xb, 0x2, "c95b"}, &(0x7f0000001540)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000001580)={0x40, 0x13, 0x6}, &(0x7f00000015c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001600)={0x40, 0x19, 0x2, "9dfa"}, &(0x7f0000001640)={0x40, 0x1a, 0x2, 0x4e}, &(0x7f0000001680)={0x40, 0x1c, 0x1, 0x80}, &(0x7f00000016c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001700)={0x40, 0x21, 0x1, 0xfb}})
r1 = syz_usb_connect$cdc_ecm(0x4, 0x6d, &(0x7f0000001800)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x5, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, "f9"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x6, 0x800, 0x7f}, [@dmm={0x7, 0x24, 0x14, 0xf820, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x81, 0x8000}, @dmm={0x7, 0x24, 0x14, 0xa7f, 0x101}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x2, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x3, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x5e7, 0x2, 0xf6, 0xff}}}}}]}}]}}, &(0x7f0000001ac0)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x201, 0x20, 0x6, 0x0, 0x20, 0x40}, 0x39, &(0x7f00000018c0)={0x5, 0xf, 0x39, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0x10001, 0xf88f, 0xaa, [0x0, 0x3fc0, 0xffc0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x3f, 0x4, 0x4d, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x1, 0x5, 0x7}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0xbe, &(0x7f0000001900)=@string={0xbe, 0x3, "d64684d703591e336e9289cd78bed0818c1237bd1cd242f903072f1777884616e936444e0d530affa183e5369ed4e0bb94e2a2ec49eba35ee95087307432b660a97c59f7fcea996596eee59e360272bcae6e3d0f2978741fd11ea641afb8141aebff1018612d9c3df57ec6a094b691e190e3c8bb2ed5ad041fe50bdc642971c220ee3c128531dfe92604ce34dff78e923f92777db9926de5cd2639ef60993134aeb48b2eb8959af46ea56ca720c9b47ce1921670edb59316e0b424b9"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x1a35}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x41f}}]})
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001bc0)={0x14, &(0x7f0000001b40)={0x40, 0x6, 0x1f, {0x1f, 0xb, "f4f51898638613f579966e2307f4f04eaf29ea9d5c84b109104f3b3ce0"}}, &(0x7f0000001b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001c00)={0x40, 0x17, 0x76, "76d4063dbb30d4464a2b8809945f54f30090b521fd6026ed5d7d98cb371f45273d0372e6e58dbc0f2ceb13762b6079795c1719dac3441a76f459e0a885c7f2caeded7e1c8a923f447a967af5c969d0d5d9a4ba7014dbf585cff408178d5496576b1aeb1e3775404924c45711f2efdd5a4a4aadbd6d58"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0xdf}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x5}})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001d80), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_DEV(r2, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x4c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40001081}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_FLOW={0x6}, @GTPA_NET_NS_FD={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x400c0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002040), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000002080)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000002200)={&(0x7f0000002000), 0xc, &(0x7f00000021c0)={&(0x7f00000020c0)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xae}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}]}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xec}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48001}, 0x887)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002280), r2)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x1004021}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000023c0), 0xffffffffffffffff)
sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x2c, r7, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x20}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x1)

23:48:22 executing program 6:
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)={0x328, 0x13, 0x400, 0x70bd2a, 0x25dfdbfd, {0xf, 0x4, 0x5c, 0x2, {0x4e23, 0x4e23, [0x100, 0x9, 0x3, 0x3], [0x4, 0x1, 0x1000, 0x4], 0x0, [0x3, 0xffff]}, 0x2, 0x4e88}, [@INET_DIAG_REQ_BYTECODE={0x87, 0x1, "004f73dab9107f85f4fe3a3b11cc100fc466bb3576c75a02a5dc8655ac0895d272cd05a37e1ae112220b8f9c8aa5f328d9dbd081bf8733e78f164026e167705be37e6931403bc169414ef3479da1067e38ce6c567f3e878429bda4732612f25e531c71061ab49d356a74f3acf97ed0133f5a08ab55362ac1b975874db66789e0524317"}, @INET_DIAG_REQ_BYTECODE={0xff, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "a66a4363077a7fa09fc12c678f9cf57d63060afd81169b1650a1d28975e1cea53e91dbcffad6e5c8a1418f6efa5f07f549b87c9630fd6a226d006a1cf2ae5dfc9bca817c46c7820b5f128d16c76085802ff5f62dde"}, @INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "6d7fdb82452139758de97cf9744bb203b159913cad499b876dceaddf594dab9a7bc3f87b0f04cd220e17ff2c9cfd3b30ab52abf02d8832b1b41256071db9ac5ff408415a3963b63a254f9cb06dfa11c23b63fccff5c17320aec3e02341671bf541f90e9c5358c8c3b7d9436ac5ccbff24dba573da0ebd9d488be06b26baff9f79661c53f6f316e0620d6db47fc766371db28d265c74c0eb54d27366b0bf3ea8d13fe2eb63543d0dff1fc10ae8c8a1b6bc7b991323a7b88d1b4bfebf9e8d1e0fceed1d1eae8c500a8117bb9e4086cd0df5a0e9e9f721964a4ce2e4ef356cfbbf52da464d4faa243374caa705773cec23794"}]}, 0x328}, 0x1, 0x0, 0x0, 0x20008010}, 0x0)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x4, 0x70bd27, 0x674b, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040001}, 0x8000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001004}, 0x0)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x144, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x55b9, @empty, 0xfffffffb}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xfffffffb, @empty, 0x7fffffff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe80d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x40004}, 0x5000)
socketpair(0x28, 0x3, 0x6, &(0x7f0000000a00)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa5a7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000044)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000b80), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000bc0))
r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000c00), 0x0, 0x0)
r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000c80), 0x24080, 0x0)
sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xb63570a610623b63}, 0x0)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), r6)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x4c, r7, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c895}, 0x0)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f40), r6)
sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r8, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x8044)
syz_genetlink_get_family_id$batadv(&(0x7f0000001040), r6)

23:48:22 executing program 7:
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x1)
r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
read$rfkill(0xffffffffffffffff, &(0x7f0000000000), 0x8)
write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x0, 0x1}, 0x8)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x81, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8042, 0x0)
io_uring_enter(r3, 0x5aa1, 0x1cde, 0x0, &(0x7f0000000140)={[0x9]}, 0x8)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x18c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb7a}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc23}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf9d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb042}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfacf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)
ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000400)="554312c45fce29c40e2dd54cb78e75c5433e37c69eaadfbcb82204cac872c601c9ddf41109b821f6721f3ee7b0c9fdeb2c2fe4d06cb5c36c")
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r3)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r5)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000580)={0x5f3, "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"})

[   92.104168] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   92.106586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   92.108908] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.109988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   92.114542] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   92.115861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   92.117913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   92.119194] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   92.119679] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.123459] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.124994] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   92.126359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   92.132941] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   92.132979] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.140859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   92.142365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.164542] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   92.169500] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   92.226969] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   92.235629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   92.237166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   92.246658] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   92.248515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   92.254759] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   92.255912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   92.262408] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   92.262533] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   92.264337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   92.265617] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   92.269443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   92.344006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   92.350972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   92.358486] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   92.358861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   92.359698] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   92.364511] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   92.365609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   92.370523] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   92.371602] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   92.382018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   92.387194] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   92.389763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   92.394458] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   92.397724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   92.413400] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   92.420517] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   92.425180] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   92.427910] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   94.173503] hrtimer: interrupt took 4640059 ns
[   94.187668] Bluetooth: hci2: command tx timeout
[   94.188429] Bluetooth: hci0: command tx timeout
[   94.250933] Bluetooth: hci1: command tx timeout
[   94.314375] Bluetooth: hci3: command tx timeout
[   94.316379] Bluetooth: hci4: command tx timeout
[   94.508016] Bluetooth: hci5: command tx timeout
[   94.510926] Bluetooth: hci7: command tx timeout
[   94.570448] Bluetooth: hci6: command tx timeout
[   96.234429] Bluetooth: hci2: command tx timeout
[   96.236126] Bluetooth: hci0: command tx timeout
[   96.299567] Bluetooth: hci1: command tx timeout
[   96.363583] Bluetooth: hci3: command tx timeout
[   96.365190] Bluetooth: hci4: command tx timeout
[   96.555425] Bluetooth: hci7: command tx timeout
[   96.557344] Bluetooth: hci5: command tx timeout
[   96.618554] Bluetooth: hci6: command tx timeout
[   98.282450] Bluetooth: hci2: command tx timeout
[   98.283000] Bluetooth: hci0: command tx timeout
[   98.347722] Bluetooth: hci1: command tx timeout
[   98.410367] Bluetooth: hci3: command tx timeout
[   98.410934] Bluetooth: hci4: command tx timeout
[   98.602382] Bluetooth: hci7: command tx timeout
[   98.604074] Bluetooth: hci5: command tx timeout
[   98.666302] Bluetooth: hci6: command tx timeout
[  100.331456] Bluetooth: hci2: command tx timeout
[  100.331992] Bluetooth: hci0: command tx timeout
[  100.395422] Bluetooth: hci1: command tx timeout
[  100.459489] Bluetooth: hci4: command tx timeout
[  100.459964] Bluetooth: hci3: command tx timeout
[  100.650887] Bluetooth: hci7: command tx timeout
[  100.651430] Bluetooth: hci5: command tx timeout
[  100.715383] Bluetooth: hci6: command tx timeout
[  154.810915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  154.814131] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  154.816178] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  154.817438] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  154.817590] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  154.819488] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  154.822473] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  154.824189] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  154.825624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  154.825689] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  154.827944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  154.833661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  155.315870] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  155.322504] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  155.333949] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  155.339690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  155.342826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  155.343811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  155.345573] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  155.353487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  155.353858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  155.358353] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  155.361634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  155.362446] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  155.362629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  155.368714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  155.370749] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  155.371945] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  155.372924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  155.377178] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  155.378487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  155.378688] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  155.383168] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  155.387373] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  155.393012] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  155.394391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  155.401898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  155.403063] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  155.403117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  155.407901] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  155.424557] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  155.427151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  155.428194] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  155.431545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  155.433346] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  155.437679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  155.462931] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  155.465355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  156.916581] Bluetooth: hci0: command tx timeout
[  156.918582] Bluetooth: hci1: command tx timeout
[  157.418373] Bluetooth: hci2: command tx timeout
[  157.546581] Bluetooth: hci7: command tx timeout
[  157.548623] Bluetooth: hci5: command tx timeout
[  157.550400] Bluetooth: hci3: command tx timeout
[  157.551799] Bluetooth: hci6: command tx timeout
[  157.610341] Bluetooth: hci4: command tx timeout
[  158.954372] Bluetooth: hci0: command tx timeout
[  158.956135] Bluetooth: hci1: command tx timeout
[  159.467293] Bluetooth: hci2: command tx timeout
[  159.594512] Bluetooth: hci7: command tx timeout
[  159.596066] Bluetooth: hci6: command tx timeout
[  159.598189] Bluetooth: hci3: command tx timeout
[  159.599500] Bluetooth: hci5: command tx timeout
[  159.659296] Bluetooth: hci4: command tx timeout
[  161.002372] Bluetooth: hci1: command tx timeout
[  161.003764] Bluetooth: hci0: command tx timeout
[  161.515371] Bluetooth: hci2: command tx timeout
[  161.644276] Bluetooth: hci3: command tx timeout
[  161.645923] Bluetooth: hci5: command tx timeout
[  161.647560] Bluetooth: hci7: command tx timeout
[  161.649004] Bluetooth: hci6: command tx timeout
[  161.706295] Bluetooth: hci4: command tx timeout
[  163.051642] Bluetooth: hci0: command tx timeout
[  163.053381] Bluetooth: hci1: command tx timeout
[  163.563586] Bluetooth: hci2: command tx timeout
[  163.690381] Bluetooth: hci3: command tx timeout
[  163.692087] Bluetooth: hci7: command tx timeout
[  163.693779] Bluetooth: hci6: command tx timeout
[  163.695436] Bluetooth: hci5: command tx timeout
[  163.755014] Bluetooth: hci4: command tx timeout
[  217.010644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.012672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.014693] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.022651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.028766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.029797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.142480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  217.149503] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  217.150592] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  217.163973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  217.167911] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  217.169894] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  217.271916] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  217.273962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  217.275065] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  217.282938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  217.284429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  217.289144] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  217.290743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  217.299670] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  217.300851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  217.321030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  217.328025] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  217.330999] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  217.331979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.335628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.337453] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.346062] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.351647] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.352806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.444986] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  217.470830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  217.475335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  217.482565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  217.485103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  217.487293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  217.519965] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  217.533530] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  217.537421] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  217.544684] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  217.546343] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  217.553689] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  217.634697] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  217.636284] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  217.640426] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  217.645799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  217.647828] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  217.651451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  219.050501] Bluetooth: hci0: command tx timeout
[  219.242311] Bluetooth: hci1: command tx timeout
[  219.370468] Bluetooth: hci2: command tx timeout
[  219.435310] Bluetooth: hci3: command tx timeout
[  219.437141] Bluetooth: hci4: command tx timeout
[  219.565444] Bluetooth: hci5: command tx timeout
[  219.626893] Bluetooth: hci6: command tx timeout
[  219.754285] Bluetooth: hci7: command tx timeout
[  221.098342] Bluetooth: hci0: command tx timeout
[  221.290385] Bluetooth: hci1: command tx timeout
[  221.419316] Bluetooth: hci2: command tx timeout
[  221.483424] Bluetooth: hci4: command tx timeout
[  221.483899] Bluetooth: hci3: command tx timeout
[  221.611372] Bluetooth: hci5: command tx timeout
[  221.676233] Bluetooth: hci6: command tx timeout
[  221.802290] Bluetooth: hci7: command tx timeout
[  223.146337] Bluetooth: hci0: command tx timeout
[  223.339285] Bluetooth: hci1: command tx timeout
[  223.466370] Bluetooth: hci2: command tx timeout
[  223.531392] Bluetooth: hci4: command tx timeout
[  223.533344] Bluetooth: hci3: command tx timeout
[  223.659256] Bluetooth: hci5: command tx timeout
[  223.723579] Bluetooth: hci6: command tx timeout
[  223.851283] Bluetooth: hci7: command tx timeout
[  225.195274] Bluetooth: hci0: command tx timeout
[  225.387530] Bluetooth: hci1: command tx timeout
[  225.516227] Bluetooth: hci2: command tx timeout
[  225.578328] Bluetooth: hci4: command tx timeout
[  225.580097] Bluetooth: hci3: command tx timeout
[  225.706271] Bluetooth: hci5: command tx timeout
[  225.770292] Bluetooth: hci6: command tx timeout
[  225.898291] Bluetooth: hci7: command tx timeout
[  277.627112] syz-executor.1 (6821) used greatest stack depth: 24512 bytes left
[  279.420397] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  279.422531] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  279.425892] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  279.428970] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  279.436840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  279.440025] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  279.489897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  279.491394] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  279.494120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  279.498413] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  279.499793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  279.500789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  279.540873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  279.559148] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  279.565816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  279.570993] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  279.573474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  279.574659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  279.621785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  279.625717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  279.639317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  279.645780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  279.656931] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  279.658519] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  279.744448] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  279.746572] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  279.750312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  279.766612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  279.773457] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  279.783763] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  279.808940] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  279.825773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  279.829699] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  279.834498] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  279.835423] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  279.844395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  279.845155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  279.851449] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  279.857727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  279.858584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  279.874530] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  279.876622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  279.876782] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  279.897889] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  279.930065] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  279.963586] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  279.983563] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  279.990509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  281.515946] Bluetooth: hci1: command tx timeout
[  281.516869] Bluetooth: hci0: command tx timeout
[  281.642309] Bluetooth: hci2: command tx timeout
[  281.706327] Bluetooth: hci3: command tx timeout
[  281.834448] Bluetooth: hci4: command tx timeout
[  281.963341] Bluetooth: hci6: command tx timeout
[  281.964292] Bluetooth: hci5: command tx timeout
[  282.090324] Bluetooth: hci7: command tx timeout
[  283.562316] Bluetooth: hci0: command tx timeout
[  283.562864] Bluetooth: hci1: command tx timeout
[  283.691281] Bluetooth: hci2: command tx timeout
[  283.756095] Bluetooth: hci3: command tx timeout
[  283.885243] Bluetooth: hci4: command tx timeout
[  284.012249] Bluetooth: hci5: command tx timeout
[  284.013647] Bluetooth: hci6: command tx timeout
[  284.140245] Bluetooth: hci7: command tx timeout
[  285.610365] Bluetooth: hci1: command tx timeout
[  285.610586] Bluetooth: hci0: command tx timeout
[  285.739311] Bluetooth: hci2: command tx timeout
[  285.803305] Bluetooth: hci3: command tx timeout
[  285.930349] Bluetooth: hci4: command tx timeout
[  286.058332] Bluetooth: hci6: command tx timeout
[  286.058348] Bluetooth: hci5: command tx timeout
[  286.187360] Bluetooth: hci7: command tx timeout
[  287.658274] Bluetooth: hci1: command tx timeout
[  287.658307] Bluetooth: hci0: command tx timeout
[  287.786290] Bluetooth: hci2: command tx timeout
[  287.850331] Bluetooth: hci3: command tx timeout
[  287.980303] Bluetooth: hci4: command tx timeout
[  288.106320] Bluetooth: hci6: command tx timeout
[  288.106347] Bluetooth: hci5: command tx timeout
[  288.235326] Bluetooth: hci7: command tx timeout
[  341.752787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  341.756780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  341.760485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  341.766976] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  341.776651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  341.778862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  341.912551] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  341.947384] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  341.966826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  341.973327] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  341.975959] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  341.978103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  341.984120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  341.985849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  341.986889] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  341.987991] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  342.002870] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  342.006766] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  342.009034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  342.014028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  342.017081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  342.018921] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  342.021057] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  342.022861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  342.183410] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  342.194400] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  342.196991] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  342.199066] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  342.204813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  342.229663] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  342.239698] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  342.241819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  342.245998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  342.247776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  342.268710] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  342.285353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  342.287832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  342.292695] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  342.295851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  342.299436] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  342.306405] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  342.311570] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  342.311665] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  342.316437] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  342.333421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  342.335449] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  342.351296] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  342.353474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  343.851390] Bluetooth: hci0: command tx timeout
[  344.042647] Bluetooth: hci2: command tx timeout
[  344.044488] Bluetooth: hci3: command tx timeout
[  344.107316] Bluetooth: hci1: command tx timeout
[  344.362702] Bluetooth: hci4: command tx timeout
[  344.426315] Bluetooth: hci6: command tx timeout
[  344.426999] Bluetooth: hci7: command tx timeout
[  344.427707] Bluetooth: hci5: command tx timeout
[  345.899035] Bluetooth: hci0: command tx timeout
[  346.090851] Bluetooth: hci2: command tx timeout
[  346.091413] Bluetooth: hci3: command tx timeout
[  346.155913] Bluetooth: hci1: command tx timeout
[  346.410499] Bluetooth: hci4: command tx timeout
[  346.474335] Bluetooth: hci7: command tx timeout
[  346.474837] Bluetooth: hci5: command tx timeout
[  346.475511] Bluetooth: hci6: command tx timeout
[  347.946256] Bluetooth: hci0: command tx timeout
[  348.138599] Bluetooth: hci2: command tx timeout
[  348.139132] Bluetooth: hci3: command tx timeout
[  348.202705] Bluetooth: hci1: command tx timeout
[  348.458277] Bluetooth: hci4: command tx timeout
[  348.522322] Bluetooth: hci6: command tx timeout
[  348.522827] Bluetooth: hci5: command tx timeout
[  348.524034] Bluetooth: hci7: command tx timeout
[  349.994340] Bluetooth: hci0: command tx timeout
[  350.186466] Bluetooth: hci3: command tx timeout
[  350.186987] Bluetooth: hci2: command tx timeout
[  350.250561] Bluetooth: hci1: command tx timeout
[  350.506344] Bluetooth: hci4: command tx timeout
[  350.570412] Bluetooth: hci7: command tx timeout
[  350.570921] Bluetooth: hci5: command tx timeout
[  350.571730] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
23:53:31  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff847bec69 RDX=ffff888023db5280
RSI=0000000000000000 RDI=0000000000000005 RBP=ffff88802c02ac00 RSP=ffff88802a5af928
R8 =0000000000000001 R9 =ffffed10047b6a50 R10=0000000000000001 R11=0000000000000001
R12=0000000000000000 R13=0000000000000001 R14=dffffc0000000000 R15=ffff88802a5afad0
RIP=ffffffff847bec6b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa5db01459e CR3=00000000298b4000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=fffff9400002c9a1 RBX=ffff88802a54fc58 RCX=ffffffff8169c717 RDX=fffff9400002c9a1
RSI=0000000000000008 RDI=ffffea0000164d00 RBP=fffff9400002c9a0 RSP=ffff88802a54fb20
R8 =0000000000000000 R9 =fffff9400002c9a0 R10=ffffea0000164d07 R11=0000000000000001
R12=ffffea0000164d00 R13=dffffc0000000000 R14=0000000000000001 R15=ffff88802a54fd98
RIP=ffffffff818b3187 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007efc0fc1b540 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007efc0fe80008 CR3=00000000369d0000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff00000000000000000000000000ff XMM01=ff00ffffffffffffffffffffffffff00
XMM02=ff00ffffffffffffffffffffff000000 XMM03=00000000000000000000000000616e69
XMM04=636e655f6362635f53454100657a696c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000