Warning: Permanently added '[localhost]:9536' (ECDSA) to the list of known hosts. 2024/10/29 08:57:03 fuzzer started 2024/10/29 08:57:03 dialing manager at localhost:45639 syzkaller login: [ 70.504546] cgroup: Unknown subsys name 'net' [ 70.623849] cgroup: Unknown subsys name 'cpuset' [ 70.637839] cgroup: Unknown subsys name 'rlimit' 2024/10/29 08:57:20 syscalls: 202 2024/10/29 08:57:20 code coverage: enabled 2024/10/29 08:57:20 comparison tracing: enabled 2024/10/29 08:57:20 extra coverage: enabled 2024/10/29 08:57:20 setuid sandbox: enabled 2024/10/29 08:57:20 namespace sandbox: enabled 2024/10/29 08:57:20 Android sandbox: enabled 2024/10/29 08:57:20 fault injection: enabled 2024/10/29 08:57:20 leak checking: enabled 2024/10/29 08:57:20 net packet injection: enabled 2024/10/29 08:57:20 net device setup: enabled 2024/10/29 08:57:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/10/29 08:57:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/10/29 08:57:20 USB emulation: enabled 2024/10/29 08:57:20 hci packet injection: enabled 2024/10/29 08:57:20 wifi device emulation: enabled 2024/10/29 08:57:20 802.15.4 emulation: enabled 2024/10/29 08:57:20 fetching corpus: 0, signal 0/0 (executing program) 2024/10/29 08:57:22 starting 8 fuzzer processes 08:57:22 executing program 0: r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r1 = accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) recvfrom(r1, 0xfffffffffffffffd, 0x0, 0x60012102, &(0x7f00000000c0)=@l2={0x1f, 0x231, @none, 0x5}, 0x80) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7b5c, @dev={0xfe, 0x80, '\x00', 0x13}, 0x80000001}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000180)=0x3, 0x4) r2 = socket(0x11, 0x1, 0x9) recvfrom(r2, &(0x7f00000001c0)=""/4096, 0x1000, 0x2, &(0x7f00000011c0)=@nl=@kern={0x10, 0x0, 0x0, 0x4800400}, 0x80) clock_gettime(0x0, &(0x7f0000001500)={0x0, 0x0}) recvmmsg(r1, &(0x7f00000014c0)=[{{&(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x80, &(0x7f0000001380)=[{&(0x7f00000012c0)=""/142, 0x8e}], 0x1, &(0x7f00000013c0)=""/245, 0xf5}, 0x4}], 0x1, 0x11060, &(0x7f0000001540)={r3, r4+60000000}) r5 = socket(0x22, 0x4, 0x8) connect$packet(r5, &(0x7f0000001580)={0x11, 0x204330b9edf92ed3, 0x0, 0x1, 0x20, 0x6, @local}, 0x14) r6 = accept$inet6(r1, 0x0, &(0x7f00000015c0)) accept$inet6(r6, &(0x7f0000001600)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000001640)=0x1c) r7 = socket$inet6(0xa, 0x5, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000001680)={{0xa, 0x4e21, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, {0xa, 0x4e23, 0x7, @private2, 0x7d5}, 0x9, [0xfffffffb, 0x80, 0x401, 0x1, 0xfff, 0x6, 0x1, 0x400]}, 0x5c) r8 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r9 = pidfd_getfd(r8, r2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mq_timedsend(r8, &(0x7f0000001840)="1cffb02e9071e0ffcbf005084eaa1a69c216e6c4ac9c10e7a56b0b6449dbfcf43771e9863cf7a936b571ed5aa305fef2f460b6f2952e681efb631cbc16884153b4fa399be2e832f579b47d93c32fdcd6e689e2aa668889439390d3efd6b1bb08068a6753dfd2760146dcd486ea1f2b98db9f2b96bd5fd0", 0x77, 0x10000, &(0x7f00000018c0)) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x28}}, 0x8040) 08:57:22 executing program 1: ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x400, 0xa40) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x61, 0x7fff, 0x17, "e7ac7c023f62d4c4aa0a6388cd51f2e968d86ad84a4ea271744e730ab7b6c31b7b2ae4993da32cf352c3ed62046bbadef66ccaa65af6e4bf75a2e26ccad9ec827fac2513b30aea2543926e97c7d3754d9544e678ad7e486a30c346ac059292054d"}) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x29, 0x3f, 0x23, 0x7f, 0x21, @ipv4={'\x00', '\xff\xff', @local}, @remote, 0x700, 0x20, 0x2, 0x1f}}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x600) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r4, 0x5386, &(0x7f0000000240)) r5 = mq_open(&(0x7f0000000280)='\x00', 0x2, 0x3a, &(0x7f00000002c0)={0x6, 0xfc, 0xffffffffffffffff}) mq_getsetattr(r5, &(0x7f0000000300)={0x6, 0x3, 0x1ff, 0x1}, &(0x7f0000000340)) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000380)) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x5, 0x20000) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000400)) recvmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000440)=@caif=@rfm, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/81, 0x51}, {&(0x7f0000000540)=""/212, 0xd4}, {&(0x7f0000000640)=""/165, 0xa5}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000007c0)=""/96, 0x60}], 0x5, &(0x7f00000008c0)=""/134, 0x86}, 0x7}, {{&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a00)=""/120, 0x78}, {&(0x7f0000000a80)=""/29, 0x1d}, {&(0x7f0000000ac0)=""/164, 0xa4}, {&(0x7f0000000b80)=""/193, 0xc1}, {&(0x7f0000000c80)=""/250, 0xfa}, {&(0x7f0000000d80)=""/53, 0x35}], 0x6}, 0x3}], 0x2, 0x40012000, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r2, 0x2, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4800) syz_open_dev$sg(&(0x7f0000000fc0), 0xfffffffffffffff7, 0x2000c2) sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0x90, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000001180)=0x8) recvfrom(0xffffffffffffffff, &(0x7f0000001240)=""/87, 0x57, 0x12020, &(0x7f00000012c0)=@in6={0xa, 0x4e20, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb18}, 0x80) 08:57:22 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000}, 0x20004000) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x810}, 0x4000800) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x185801, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x241040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r4, 0xa00, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x28, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffc}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x14, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x74}, 0x1, 0x0, 0x0, 0xc800}, 0x20000040) sendmsg$802154_raw(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="c9f7a8ea0407679b8d60afb90800713b0bbd1de259b6c98cdcab41eb4dc9f30705734b1ed7e9555c377c747e408c58f25538c14eceeb844f4fe38656361caaf4dec658cb8e2e334fe0246a85c08f8b21e4072b829d7ecd06a5cdbf63bc9c1c42fd6b55f2878f00555874fe617c27e328879a6df181fe198e782a1e3225229fd1e9bfc0c8915f575bbe8c86a99c727abe29764876c60680bfdd944052971e79559fbf06eacf8a752012a6afff2820b2ad6d7c9e2d", 0xb4}, 0x1, 0x0, 0x0, 0x400c040}, 0x8004) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x440401}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x810) r6 = socket(0x27, 0x4, 0x6) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r3) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000a00)={&(0x7f0000000900), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x4000801) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000a40)) timerfd_create(0x5, 0x80000) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0), 0x2000, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@mmap}, {@cache_mmap}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x9}}, {@aname={'aname', 0x3d, 'wpan3\x00'}}], [{@seclabel}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@hash}]}}) [ 88.402848] audit: type=1400 audit(1730192242.414:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 08:57:22 executing program 3: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000040)=0x2, 0x4) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e22, 0x1, @mcast1, 0xfff}, {0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfff}, 0x1, [0x1, 0x8, 0x5, 0x401, 0x290, 0x5, 0x37b7229d, 0x100]}, 0x5c) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000140)=0x23) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040c1}, 0x3404c004) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r3, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc840}, 0x40) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000500)={0x0, 0x8001, 0x9}) connect$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x1c, 0x0, 0x1, 0x15, 0x6, @random="f2ec30dace36"}, 0x14) r4 = socket$inet(0x2, 0x3, 0x4) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="5cae123ee43215d93954ab8e23493f38fc9d355b08fdbacbd4f8b66c082e3c3714dfb4270ced38f3550eb331255d47d125698227c9fde9e1c813439f847faff752a4bb87a758004f553275845f7295c595d1dd3a95fe94e620cf251443d7ae3ab1da042591d3b1ca104b25c3a8b1b3b16d630d118c3e42b4e363ff53f12724618a1371372537c86777e513d28bbe26be80d60d71c4783be1ba59c8bd847cc97823f05fdd09198b2f7e9cec760260b2034f7bcf", 0xb3}, 0x1, 0x0, 0x0, 0xc000}, 0x2) mq_timedsend(0xffffffffffffffff, &(0x7f0000000700)="4823b682ec379177986230a30ebf6e07bb2f3a6b2b9988555092f0a8b7605a17c240eac65336adb109e485e46f704769b0f245899c8cebcd57089de674717bac65a24e0946fd98b691da7dc41cc8236a2410aa535e3d9a1f7a8100250c05bc1701ceedc26449a82b5c180fa5d573cf34eb398e756f64bbae3342c0f598a45f967121e9d8927253c39c2a41f9e98529", 0x8f, 0x9, &(0x7f00000007c0)={0x0, 0x989680}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000800)={0x0, 0x3, r4, 0xc8b}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "3e632ca4609dea2811d501a9e434a9e5"}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "4eb71922933d754f758fc74f9342b886"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) 08:57:22 executing program 4: sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x804, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x20010000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, 0x0, 0x1, 0x70bd29, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4d}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x3}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r5, 0x900, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xff}]}, 0x50}, 0x1, 0x0, 0x0, 0x40090}, 0x4804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r5, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8045}, 0x20040080) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004891}, 0x24000080) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000980), r8) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_CV4DOI={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x8084}, 0x8008d) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x804) 08:57:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x1f}, @IEEE802154_ATTR_TXPOWER={0x5}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x3c}}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d40)={&(0x7f0000000380)={0x9b8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x3e, 0x5, "3b62e660f36298ecb8244eb8264a2f1c5c894f8e30802a24bf091dcb8b99c1ba2c7dba01dc9431d8f91967b4be238a1e628e05890360cc40d4fa"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5c, 0x4, "216f4e936415a204372c7e59ce6f69bed870cb80050437cac6446f89244a328eae70b2495cab39d56c3b6e7a2dcf0fb4044208821ee7eb296c3a18768e0fd70d43e2ab73fe1fa1f58474c7acf618953b82faf8b9673b2085"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x330, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc9d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x86}]}]}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "99d9c29298aaba72265c3a4a008c0342ee54c658c592e7ddf6d265ed2c624948080c3a3c98d6f9b97572600f78d51bf40c7a8f2ea01d0365356051a22c1f8f851e4039cfad7add26ae06266b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "2a92a9b4eac33b031ca524ecef81519ae407ccd5c443b948b36a46e6e3db4199e28f2fc0d0ebf335bceae343448b15bf674fc3ca6b67021e00b199c93dffb09bcec572925477beb239104376c2eaca78fad68941fef87e0d6d8beab46530e5c768c9e48a4951dc46b346b46dfc0d79d7e8239cc1be78730a0fe8667fab7c92b5271a962d792eddab35b806d50c291f2b1c18fa9b183b6ad541d4c0cd2fd6b2cdc152bdcc7b0392126bb396f4362a6810ec3181f659ae5ff5a0f4902b5af7ba161f857fcc1a23107b35cefb3b3f5d6284a6f18b463f016e795ac22843c15f1c9537f6932366f4301330e9c1d6fc49e641bb77fc37"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\'(@+@\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']@*%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xb7,(})\'@'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xb3, 0x5, "7427961370d88ba4fce78b1a4241fbe2031e1b2254858ca0443a654baebed1a64f51381f283b20a8bfa2b49601d25ae9a20cf14b2658c618503fd5f46599fb89a2141797022b0bfad8a2de9a2ab58ec8abc7b1222fb6957f4da91d2f10ec2442469a661a61acb2906ae983889dc39510ac3a24c3c88da4a47d9640efd1cb4b441c6a4e0fe1c830a9a25b6abcc6c22ae66f5180d106f3e623e5bfb45434941523f924bccf658054655a1126c3b76d38"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']{\xf1,^:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-:\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x268, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{:+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-*/\'-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/(*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x60000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ':{\xc9\'\xb3)\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&^.^\'\'+&)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\')\\%]\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3f}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x81}]}, @ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x278, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x31, 0x5, "2024b79daf519ae4a0f1e9c472effae48c3687e3f8f6b566d703ef19e79cb08755d15a955c760ba2938574fb55"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "340b907b3fe9d195f7ada541a5de8a62826b6e562b608454a5f460beee40abd08ad5358591072c880999faee41714cbba4c354dfad2845b4f32e02885dcb352360bddd0a343dea206f01b6490408137b3e4b0f5dc8f0cccd2761893770dd65670c8401f8feff7af6450d25f80eb34220e85dffc2"}, @ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "53f70f54b95a441e1d4662ab86223ffece13b912e8980a5f8f66536dd324ab974b9b34e9c27b3f2c715f99031cf3491ab81278257ecf356aa79a1b8f1e8f85b974e31a4866dd5df782ab631cef11899c661a966331815ccf9011343a48fe7efac718b17b7e8fc0626919a0a99630"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')&)\xb8%\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '.!-!!!{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^%]+/\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#,%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe6}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x496}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfc000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb3}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wpan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}]}]}]}, 0x9b8}, 0x1, 0x0, 0x0, 0x41}, 0x20004840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000e40)={&(0x7f0000000e00), 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000810}, 0x5) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001000)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x54, r3, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40054) syz_genetlink_get_family_id$team(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001300), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, r5, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1c}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xc09db442c4c24460}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x48}, 0x1, 0x0, 0x0, 0x2406c014}, 0x1) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000015c0), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x70, r6, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x43}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000800}, 0x44) 08:57:22 executing program 7: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x34700, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000010) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0xe0842, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000001c0)=0x2f1) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mq_timedreceive(r0, &(0x7f0000000440)=""/45, 0x2d, 0xf04, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000480), 0x98880, 0x0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r3, 0x0, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0xc001) r6 = fork() r7 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0x0, r6, 0x7, 0xffffffffffffffff, &(0x7f00000005c0)={r7, r5, 0x9}) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000600), 0xcc41, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r8, 0x11, 0x1, &(0x7f0000000640), &(0x7f0000000680)) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) 08:57:22 executing program 6: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004090}, 0x20008000) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x38}}, 0x48000) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x40}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001c80)={'ip6gre0\x00', &(0x7f0000001c00)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0x0, 0x40, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}, 0x7a0, 0x8000, 0x80, 0x6}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40841) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001d80), r5) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001e00), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001e40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000001e80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000001ec0)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000001fc0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r6, 0x10, 0x1, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x45) [ 89.842304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.843744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.845214] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.847055] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.850735] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.852526] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.855277] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.857041] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.858600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.860005] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.862084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.864431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.871933] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.873785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.877936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.879561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.881127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.882249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.897827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.899618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.901981] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.910321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.912358] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.915286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.935971] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.949978] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.951590] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.954648] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.957389] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.958907] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.959998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.961397] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.963235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.968469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.970066] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.971293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.984312] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.990460] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.992237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.995093] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.996552] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.997522] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.998434] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 90.001824] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 90.003573] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 90.004698] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 90.014392] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 90.016897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 91.937388] Bluetooth: hci3: command tx timeout [ 91.938232] Bluetooth: hci0: command tx timeout [ 91.938362] Bluetooth: hci2: command tx timeout [ 92.000325] Bluetooth: hci4: command tx timeout [ 92.001043] Bluetooth: hci5: command tx timeout [ 92.001677] Bluetooth: hci1: command tx timeout [ 92.064448] Bluetooth: hci6: command tx timeout [ 92.065487] Bluetooth: hci7: command tx timeout [ 93.984602] Bluetooth: hci2: command tx timeout [ 93.984637] Bluetooth: hci0: command tx timeout [ 93.985212] Bluetooth: hci3: command tx timeout [ 94.048983] Bluetooth: hci1: command tx timeout [ 94.049611] Bluetooth: hci4: command tx timeout [ 94.050081] Bluetooth: hci5: command tx timeout [ 94.112238] Bluetooth: hci7: command tx timeout [ 94.112276] Bluetooth: hci6: command tx timeout [ 96.032470] Bluetooth: hci0: command tx timeout [ 96.033051] Bluetooth: hci2: command tx timeout [ 96.034275] Bluetooth: hci3: command tx timeout [ 96.096840] Bluetooth: hci4: command tx timeout [ 96.097388] Bluetooth: hci1: command tx timeout [ 96.097847] Bluetooth: hci5: command tx timeout [ 96.160422] Bluetooth: hci6: command tx timeout [ 96.162037] Bluetooth: hci7: command tx timeout [ 98.082208] Bluetooth: hci2: command tx timeout [ 98.082234] Bluetooth: hci3: command tx timeout [ 98.082283] Bluetooth: hci0: command tx timeout [ 98.144399] Bluetooth: hci4: command tx timeout [ 98.144941] Bluetooth: hci5: command tx timeout [ 98.145534] Bluetooth: hci1: command tx timeout [ 98.209775] Bluetooth: hci7: command tx timeout [ 98.210613] Bluetooth: hci6: command tx timeout [ 152.763883] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.767002] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.769485] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.774470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.777572] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.779935] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.828449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.830393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.833575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.843376] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.847651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.848891] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.882601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.890802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.893390] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.897625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.899810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.902370] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.905603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.911419] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.916579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.922346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.925621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.930450] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.932602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.955323] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.960044] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.963071] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 152.965888] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.968702] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.970819] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 152.973275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 152.974904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.980681] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.987353] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 152.989813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.000476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.000560] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.007362] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.019399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.028624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.032615] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.037271] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.039842] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.042390] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.062382] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.107248] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.111380] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 154.848269] Bluetooth: hci0: command tx timeout [ 154.913228] Bluetooth: hci1: command tx timeout [ 155.104270] Bluetooth: hci2: command tx timeout [ 155.105817] Bluetooth: hci4: command tx timeout [ 155.107489] Bluetooth: hci3: command tx timeout [ 155.168413] Bluetooth: hci7: command tx timeout [ 155.170211] Bluetooth: hci5: command tx timeout [ 155.232480] Bluetooth: hci6: command tx timeout [ 156.898273] Bluetooth: hci0: command tx timeout [ 156.960242] Bluetooth: hci1: command tx timeout [ 157.153223] Bluetooth: hci3: command tx timeout [ 157.153775] Bluetooth: hci2: command tx timeout [ 157.154381] Bluetooth: hci4: command tx timeout [ 157.216381] Bluetooth: hci7: command tx timeout [ 157.217989] Bluetooth: hci5: command tx timeout [ 157.280299] Bluetooth: hci6: command tx timeout [ 158.944790] Bluetooth: hci0: command tx timeout [ 159.008211] Bluetooth: hci1: command tx timeout [ 159.200253] Bluetooth: hci4: command tx timeout [ 159.200809] Bluetooth: hci2: command tx timeout [ 159.201973] Bluetooth: hci3: command tx timeout [ 159.265206] Bluetooth: hci5: command tx timeout [ 159.265746] Bluetooth: hci7: command tx timeout [ 159.329202] Bluetooth: hci6: command tx timeout [ 160.992391] Bluetooth: hci0: command tx timeout [ 161.056352] Bluetooth: hci1: command tx timeout [ 161.248428] Bluetooth: hci4: command tx timeout [ 161.248968] Bluetooth: hci3: command tx timeout [ 161.249821] Bluetooth: hci2: command tx timeout [ 161.313216] Bluetooth: hci5: command tx timeout [ 161.314576] Bluetooth: hci7: command tx timeout [ 161.377165] Bluetooth: hci6: command tx timeout [ 214.892327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.893853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.895021] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.898681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.900381] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.901500] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.961615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.965334] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.968365] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.979335] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.984594] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.990554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.028417] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.041387] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.048482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.052858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.055489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.057350] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.086733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.101418] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.102525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.132554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.139689] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.142347] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.216628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.219513] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.220830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.224561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.227353] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.229018] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.230055] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.254538] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.256745] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.266065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.270753] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.273319] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.622800] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.641448] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.643435] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.660511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.680430] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.698373] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.710863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.711253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.739959] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.740052] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.745480] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.746469] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 216.929212] Bluetooth: hci0: command tx timeout [ 217.056348] Bluetooth: hci1: command tx timeout [ 217.121422] Bluetooth: hci2: command tx timeout [ 217.185203] Bluetooth: hci3: command tx timeout [ 217.249467] Bluetooth: hci5: command tx timeout [ 217.378187] Bluetooth: hci4: command tx timeout [ 217.825177] Bluetooth: hci6: command tx timeout [ 217.825984] Bluetooth: hci7: command tx timeout [ 218.977359] Bluetooth: hci0: command tx timeout [ 219.106337] Bluetooth: hci1: command tx timeout [ 219.170267] Bluetooth: hci2: command tx timeout [ 219.233279] Bluetooth: hci3: command tx timeout [ 219.296241] Bluetooth: hci5: command tx timeout [ 219.424915] Bluetooth: hci4: command tx timeout [ 219.874186] Bluetooth: hci7: command tx timeout [ 219.874710] Bluetooth: hci6: command tx timeout [ 221.025242] Bluetooth: hci0: command tx timeout [ 221.153228] Bluetooth: hci1: command tx timeout [ 221.217193] Bluetooth: hci2: command tx timeout [ 221.280164] Bluetooth: hci3: command tx timeout [ 221.346190] Bluetooth: hci5: command tx timeout [ 221.472211] Bluetooth: hci4: command tx timeout [ 221.920277] Bluetooth: hci6: command tx timeout [ 221.920800] Bluetooth: hci7: command tx timeout [ 223.073272] Bluetooth: hci0: command tx timeout [ 223.201210] Bluetooth: hci1: command tx timeout [ 223.265187] Bluetooth: hci2: command tx timeout [ 223.328176] Bluetooth: hci3: command tx timeout [ 223.392374] Bluetooth: hci5: command tx timeout [ 223.522216] Bluetooth: hci4: command tx timeout [ 223.969257] Bluetooth: hci7: command tx timeout [ 223.969814] Bluetooth: hci6: command tx timeout [ 277.375855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.377521] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.378544] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.380736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.384688] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.385683] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.420454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.427428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.432853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.437111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.438819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.441930] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.444434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.445390] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.446964] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.458704] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.461054] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.462339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.498507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.499890] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.500927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.509598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.511149] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.513589] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.560479] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.564284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.565512] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.569772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.573672] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.574696] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.682493] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.696485] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.697468] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.706125] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.707475] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.709745] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.711351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.712418] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.717827] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.719386] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.738310] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.739289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.779810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.787187] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.794279] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.794302] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.798387] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 277.800580] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 279.397145] Bluetooth: hci1: command tx timeout [ 279.520270] Bluetooth: hci2: command tx timeout [ 279.521602] Bluetooth: hci0: command tx timeout [ 279.585217] Bluetooth: hci3: command tx timeout [ 279.649397] Bluetooth: hci4: command tx timeout [ 279.780220] Bluetooth: hci5: command tx timeout [ 279.904248] Bluetooth: hci6: command tx timeout [ 279.905366] Bluetooth: hci7: command tx timeout [ 281.441287] Bluetooth: hci1: command tx timeout [ 281.570252] Bluetooth: hci0: command tx timeout [ 281.572177] Bluetooth: hci2: command tx timeout [ 281.632227] Bluetooth: hci3: command tx timeout [ 281.697491] Bluetooth: hci4: command tx timeout [ 281.825714] Bluetooth: hci5: command tx timeout [ 281.953234] Bluetooth: hci7: command tx timeout [ 281.954920] Bluetooth: hci6: command tx timeout [ 283.494133] Bluetooth: hci1: command tx timeout [ 283.616220] Bluetooth: hci2: command tx timeout [ 283.616800] Bluetooth: hci0: command tx timeout [ 283.680194] Bluetooth: hci3: command tx timeout [ 283.745157] Bluetooth: hci4: command tx timeout [ 283.873394] Bluetooth: hci5: command tx timeout [ 284.000366] Bluetooth: hci7: command tx timeout [ 284.000916] Bluetooth: hci6: command tx timeout [ 285.537362] Bluetooth: hci1: command tx timeout [ 285.664309] Bluetooth: hci0: command tx timeout [ 285.664861] Bluetooth: hci2: command tx timeout [ 285.731124] Bluetooth: hci3: command tx timeout [ 285.792271] Bluetooth: hci4: command tx timeout [ 285.921452] Bluetooth: hci5: command tx timeout [ 286.049175] Bluetooth: hci7: command tx timeout [ 286.050637] Bluetooth: hci6: command tx timeout [ 337.337706] syz-executor.2 (10104) used greatest stack depth: 23040 bytes left [ 339.568256] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.569632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.570791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.573743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.575460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.576730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.688868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.691923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.693907] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.701647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 339.704377] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.706744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 339.709027] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.710297] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 339.716879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.729047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 339.732852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 339.734578] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 339.826744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.828342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.829447] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.836045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.837794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.839299] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.848030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.851716] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.855309] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.869401] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.884418] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.886267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 339.947176] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.949573] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.951053] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.953990] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.955142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.958550] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.960489] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 339.963437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 339.972422] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.024415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.029814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.037361] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.038752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.047364] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.049742] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.055247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.056544] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.057627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 341.601176] Bluetooth: hci0: command tx timeout [ 341.792568] Bluetooth: hci2: command tx timeout [ 341.793665] Bluetooth: hci1: command tx timeout [ 341.856290] Bluetooth: hci3: command tx timeout [ 341.921212] Bluetooth: hci4: command tx timeout [ 341.984193] Bluetooth: hci6: command tx timeout [ 342.112564] Bluetooth: hci7: command tx timeout [ 342.177160] Bluetooth: hci5: command tx timeout [ 343.648159] Bluetooth: hci0: command tx timeout [ 343.840154] Bluetooth: hci2: command tx timeout [ 343.841289] Bluetooth: hci1: command tx timeout [ 343.904225] Bluetooth: hci3: command tx timeout [ 343.968268] Bluetooth: hci4: command tx timeout [ 344.032425] Bluetooth: hci6: command tx timeout [ 344.160229] Bluetooth: hci7: command tx timeout [ 344.225750] Bluetooth: hci5: command tx timeout [ 345.696169] Bluetooth: hci0: command tx timeout [ 345.888216] Bluetooth: hci1: command tx timeout [ 345.888250] Bluetooth: hci2: command tx timeout [ 345.954174] Bluetooth: hci3: command tx timeout [ 346.016333] Bluetooth: hci4: command tx timeout [ 346.082103] Bluetooth: hci6: command tx timeout [ 346.208308] Bluetooth: hci7: command tx timeout [ 346.272190] Bluetooth: hci5: command tx timeout [ 347.744213] Bluetooth: hci0: command tx timeout [ 347.936203] Bluetooth: hci2: command tx timeout [ 347.936274] Bluetooth: hci1: command tx timeout [ 348.003014] Bluetooth: hci3: command tx timeout [ 348.066292] Bluetooth: hci4: command tx timeout [ 348.129297] Bluetooth: hci6: command tx timeout [ 348.256271] Bluetooth: hci7: command tx timeout [ 348.321166] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 09:02:23 Registers: info registers vcpu 0 RAX=ffffffff84821f90 RBX=ffffffff813e8f70 RCX=ffffffff8678c301 RDX=1ffff1100d9c1352 RSI=ffffffff84821f90 RDI=ffffffff84821f90 RBP=ffff88806ce09ad0 RSP=ffff88806ce09a38 R8 =ffffffff8678c3ac R9 =ffff88806ce09a78 R10=000000000003c001 R11=0000000000007fe9 R12=ffff88806ce09b00 R13=0000000000000000 R14=ffff88802a71d280 R15=ffff88801501f600 RIP=ffffffff810d19a0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f82c08b227c CR3=000000001691c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000ff0000 XMM01=4700352e322e325f4342494c4700362e XMM02=ff00ffffffffffffffffffffff000000 XMM03=000000000000000000312e325f434249 XMM04=494c470037312e325f4342494c470036 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=ffffffff85c695c0 RCX=ffffffff8151fbd5 RDX=ffff888023318000 RSI=ffffffff8151facd RDI=0000000000000001 RBP=0000000000000001 RSP=ffff88802b387758 R8 =0000000000000000 R9 =fffffbfff0fda9d4 R10=0000000000000001 R11=00000000000c2f81 R12=00007f8160ba9699 R13=0000000000000000 R14=ffffffff85c69668 R15=ffff88803400c460 RIP=ffffffff8151fad4 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe6900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb3e379a620 CR3=000000002b58a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000