Warning: Permanently added '[localhost]:59355' (ECDSA) to the list of known hosts. 2024/11/11 02:07:38 fuzzer started 2024/11/11 02:07:39 dialing manager at localhost:46317 syzkaller login: [ 69.079630] cgroup: Unknown subsys name 'net' [ 69.270158] cgroup: Unknown subsys name 'cpuset' [ 69.291830] cgroup: Unknown subsys name 'rlimit' 2024/11/11 02:07:57 syscalls: 205 2024/11/11 02:07:57 code coverage: enabled 2024/11/11 02:07:57 comparison tracing: enabled 2024/11/11 02:07:57 extra coverage: enabled 2024/11/11 02:07:57 setuid sandbox: enabled 2024/11/11 02:07:57 namespace sandbox: enabled 2024/11/11 02:07:57 Android sandbox: enabled 2024/11/11 02:07:57 fault injection: enabled 2024/11/11 02:07:57 leak checking: enabled 2024/11/11 02:07:57 net packet injection: enabled 2024/11/11 02:07:57 net device setup: enabled 2024/11/11 02:07:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/11/11 02:07:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/11/11 02:07:57 USB emulation: enabled 2024/11/11 02:07:57 hci packet injection: enabled 2024/11/11 02:07:57 wifi device emulation: enabled 2024/11/11 02:07:57 802.15.4 emulation: enabled 2024/11/11 02:07:57 fetching corpus: 0, signal 0/0 (executing program) 2024/11/11 02:07:58 starting 8 fuzzer processes 02:07:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x15}, 0x8814) socketpair(0x22, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x120, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x68}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}, @NL80211_ATTR_VENDOR_DATA={0xc7, 0xc5, "cdfb0ac59a97a4320b1f4c0097e4c48130eb3a0e760f7ecfab6f91fc7e205acbb1c0a7989a4c6786f2fe7de9ad1b2ac5f0413b6bcd33689e748fcf308f3eaf6d636bb3b6ae9d13151d769b034789170a24412286e64dff5c5ed973588cc73f68c89518b7fddd97ac2bdc5bc2354711815952f53ad6a3e09678022ea41b7324509832f01a31f061af3b5a3dc68ce0f3abda1fec4f6eff654dca66e2b4233e022913b8baab0895db6d117ef6a66962e961a40eea928bd4ea6016c3f961850d0c7aaccdd5"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x10000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1851}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8001}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x7c, r9, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x208}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x10000, 0x8000}}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xec}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x7}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa0}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40002}, 0x20044010) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r10, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x200000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40804}, 0x4) socketpair(0xa, 0x2, 0xe26, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r2) sendmsg$BATADV_CMD_SET_VLAN(r11, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, r12, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000090}, 0xc090) r13 = socket(0x10, 0x80000, 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r13) 02:07:58 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x14}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, '\'}\'-!\'\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x24008000) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800c1}, 0x0) r2 = socket(0x26, 0x3, 0x28) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x134, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd698}}]}, 0x88}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0x84, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x74, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x48068ae45f3ac02c}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008000}, 0x5) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x88, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x2d}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3ea}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6ee}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x238}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x18}, {0x30}, {0x1b, 0x1}, {0x18}, {0x48, 0x1}, {0x60, 0x1}, {0x48, 0x1}, {0x4, 0x1}, {0x30, 0x1}, {0x2, 0x1}, {0x6}, {0x0, 0x1}, {0x12}, {0x30, 0x1}, {0x9, 0x1}, {0x1b, 0x1}, {0xe}, {0x9, 0x1}, {0x36, 0x1}, {0x9}, {0x2f}, {0x9, 0x1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4891}, 0x20000000) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x5084}, 0x48800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x840}, 0x80) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ec0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x4c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x29}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004004) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044800}, 0x8100) 02:07:58 executing program 2: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2179e2e2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="87aa579de226"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24008004) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}]}, 0x20}}, 0x20000000) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x108, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0xc014}, 0x14) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020050}, 0x60008884) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x200000c5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x21a08092}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40008c0}, 0x10000080) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8004880) r2 = socket(0x21, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000880)) r3 = socket(0x6, 0x5, 0x47) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040040}, 0x24000810) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x160, 0x0, 0xbd796cbec04b3020, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x160}}, 0x8080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000c80)={0xffffffffffffffff}) pipe2(&(0x7f0000000cc0)={0xffffffffffffffff}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xce4d}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x2c, r6, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x81) 02:07:58 executing program 3: r0 = getpgrp(0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = epoll_create(0x3691d874) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x8}) socketpair(0x21, 0xa, 0x10001, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x72}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x1f}}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x6e}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000100}, 0x4000800) sendmsg$AUDIT_TTY_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x3f9, 0x200, 0x1ff, 0x25dfdbfc, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x7e}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x29}}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3ff, 0x3b}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8004) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x428, 0x3f4, 0x10, 0x70bd27, 0x25dfdbfd, {0x5, 0x2, 0x6, [0x1, 0x8, 0x80000000, 0x7, 0x1ff, 0x3, 0x0, 0x7fff, 0xfffffb1d, 0x5, 0x40, 0x1, 0x4, 0x2, 0x9, 0x9, 0xa1, 0x4, 0x0, 0x8b8b, 0x5, 0x3, 0x2, 0x2, 0x4, 0x1, 0x9, 0x0, 0x7fff, 0x0, 0x81, 0x7f, 0x6, 0x5, 0x2, 0x1, 0x7f, 0x8, 0xffffffff, 0x1, 0x7, 0x7, 0x0, 0x80000001, 0xfff, 0x4, 0x2, 0x5, 0x9, 0x7, 0xbb2e, 0x8, 0x9, 0x1, 0x3, 0x10001, 0x7fff, 0x8, 0x65e2, 0x7f, 0x0, 0xc0, 0x1f, 0x7], [0x1, 0x1, 0x9, 0x20, 0x4, 0x7, 0x0, 0x3, 0x10000, 0x8, 0x1, 0x20, 0x0, 0x6, 0xc61b, 0x441, 0x3, 0x30, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0x8, 0x2, 0x6, 0x6, 0x8001, 0x4, 0xfffffffb, 0x3, 0x10001, 0x80000001, 0x24df, 0x4, 0x6, 0x100, 0x7, 0x93c, 0x8, 0x8, 0xfffffa64, 0x71a, 0x8, 0x6, 0x2d2, 0xfffff2e6, 0x40000000, 0xfffff800, 0x4, 0x3f, 0x0, 0x81, 0x2, 0x9fc, 0x5, 0x540, 0x2, 0x0, 0x0, 0x1000, 0x0, 0x9, 0x8000], [0x0, 0x1, 0x2, 0x9, 0x3ba, 0x4, 0x3, 0x801, 0x7, 0x200, 0x7f, 0x6, 0x1, 0x9, 0x9, 0x6, 0x7, 0x0, 0xfffffff7, 0x8, 0xd34a, 0x80000001, 0x9, 0x3, 0xffffff80, 0x6, 0x9, 0xc97, 0xff, 0x9, 0x4, 0xad, 0x8, 0x7, 0x80, 0x5, 0x1, 0x8000, 0x3, 0x8, 0x2, 0x9a, 0x0, 0x1ff, 0x401, 0x3f, 0x5, 0x2, 0x9, 0x0, 0x9, 0x8, 0x200000, 0x3, 0x100, 0x3, 0x5, 0xad, 0x0, 0x7fffffff, 0x8, 0x1, 0x1], [0x6, 0x5, 0xa8, 0x6, 0x8, 0x8, 0x1, 0x4, 0xfffffeff, 0xce9d, 0x1ff, 0x35, 0xc9aa, 0x3f, 0xef0d, 0x4, 0x401, 0x2a, 0x96ed, 0x7, 0xd27c, 0x3ff, 0x3f, 0x10000, 0x9, 0x9, 0x4, 0x6, 0x4, 0x152, 0x280000, 0xfffffffb, 0xffffbb2b, 0x2, 0x1, 0x9, 0x7, 0x5, 0x5, 0x7a9, 0xffffffff, 0x200, 0x6, 0x7fff, 0x41, 0x5, 0x100, 0x429, 0x2, 0x0, 0xff, 0x5, 0x8, 0x8, 0x200, 0xb6, 0xfff, 0x9, 0x80, 0x7fff, 0xfff, 0x7, 0x5, 0xb161], 0x7, ['\x00', 'wlan1\x00']}, [""]}, 0x428}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r9 = socket(0x10, 0x6, 0x8) sendmsg$AUDIT_SIGNAL_INFO(r9, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x10, 0x3f2, 0x400, 0x70bd2c, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) getpgrp(r1) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x74}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x2a}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]]}, 0x60}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000d00)={'tunl0\x00', &(0x7f0000000c80)={'tunl0\x00', 0x0, 0x40, 0x7800, 0x2, 0x3ff, {{0xb, 0x4, 0x0, 0x3e, 0x2c, 0x68, 0x0, 0x9, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0x17, 0x11, [@multicast2, @remote, @private=0xa010101, @empty, @multicast2]}]}}}}}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0xe}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 02:07:58 executing program 4: sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xb3b8, 0x42}}}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3f}]}, 0x30}, 0x1, 0x0, 0x0, 0x100}, 0x4008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}]}, 0x24}}, 0x40000) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0xc4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40084) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r2, 0xc04, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x180c4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x128, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x8000010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r6, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x100080c0}, 0x200000c4) socketpair(0x26, 0xa, 0x2, &(0x7f0000000a00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xe4, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfb3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x899}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12d}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x11101000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x3c, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x81}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 88.241338] audit: type=1400 audit(1731290879.018:7): avc: denied { execmem } for pid=274 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 02:07:59 executing program 5: setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x7f, 0x4) socketpair(0x22, 0x2, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f5, 0x2, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4008004}, 0x8000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x84, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c011) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048cc1}, 0x4040000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r2, 0x204, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xc011}, 0x4084) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, 0x464, 0x2, 0x70bd2b, 0x25dfdbfd, "b02624ab28aac0558c51ddb2cfa755122d9dd6853f81449ca50b4c1948ea8179546cce604f793c1a082e3cdf5c3920b47250690b6bd1f0f019e089575e684876a926539a00e0d32c329e547b2c544b0d9df5ae4a02fe4b879b93ad20a88c5721eb6b94640e122073e4a2d8dd7321f7feba35c673c02ca69f94a2865bb844f6e02b7d31e5dba152a0ec4ce2e39d2b804ed788ba08f51a1aff5baff4ae420269cab6150ee5021260a3d5c3a5f4f4c8d02129b026caab8cb9b1b5045932fdca48", ["", "", "", "", "", "", ""]}, 0xd0}, 0x1, 0x0, 0x0, 0x8c0}, 0x40800) socketpair(0xf, 0x4, 0xfffffff9, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000b00)={0x448, 0x3f4, 0x100, 0x70bd2a, 0x25dfdbfe, {0x10, 0x1, 0xb, [0xdbe6, 0x1, 0x200, 0xff, 0x80000001, 0x0, 0x9, 0x0, 0x43312acf, 0x47, 0xa59d, 0xffffffe1, 0x6, 0x0, 0x2f6, 0x6, 0x6, 0xdcac, 0xfffffffc, 0x3ff, 0x4, 0x1ff, 0x35b7, 0x7, 0x6, 0xe777, 0x2, 0x5, 0x9, 0x5, 0x7, 0x1, 0x3, 0x0, 0x7, 0x1, 0x2, 0x8, 0x80000001, 0x2, 0x8000, 0xae6, 0x4, 0x6, 0x401, 0x100, 0x7fff, 0x7, 0x1, 0x0, 0x1000, 0x1000, 0x8000, 0x1e545655, 0x1, 0x115, 0x1, 0x20, 0x8d, 0x6, 0x9, 0x6, 0x1, 0x5], [0x400, 0x5, 0x1, 0x0, 0x1, 0xd262, 0x3, 0x3de, 0x6, 0x1, 0x401, 0x97, 0x3, 0x7f, 0xff, 0xfffffffb, 0x4, 0x80000001, 0x2, 0x800, 0x8, 0x6, 0x401, 0xc16, 0x2, 0x40, 0x3, 0x8000, 0x5, 0x10001, 0x40, 0xfffffff7, 0x7, 0x5, 0xfa9e, 0xe41d, 0xffff, 0x1, 0x3f, 0x800, 0x80000001, 0x666, 0xffff, 0x5, 0xffff37a0, 0xe8, 0xfffff001, 0x4, 0x6, 0x8, 0x3, 0x70f, 0xb0, 0x4, 0x7, 0x9, 0x0, 0x20, 0x3, 0x1f, 0xd8, 0x8001, 0x0, 0x2], [0x400, 0x3, 0x2b3b, 0x2, 0x7, 0xffffffff, 0x8, 0xe5, 0x0, 0x40, 0x76, 0x8, 0xbd6, 0x800, 0xe06e, 0x0, 0x1, 0xa8, 0x35f, 0x10001, 0x84a, 0x7fffffff, 0x3ff, 0xffff, 0xf2, 0x0, 0x1000, 0x7ff, 0x8, 0x7, 0x7ff, 0x2, 0x7f, 0x0, 0x187, 0x3, 0x7af, 0xeb, 0x6, 0x8000, 0x81, 0x1e6, 0x4, 0x800, 0xe0f, 0x1, 0x1, 0x6, 0x800, 0x1, 0x0, 0x4, 0x4, 0x101, 0x5, 0x3ff, 0x6, 0xfffff7ab, 0xfffffffe, 0x3, 0x9, 0x1, 0x8, 0x2], [0x3ff, 0x6, 0x81, 0x3f, 0xfffffc00, 0x7f, 0x4, 0x5, 0x81b5, 0xffffff00, 0xa2eb, 0x8, 0x5, 0x8, 0x1, 0xfff, 0x92, 0x0, 0x8, 0x7, 0x95, 0x833b, 0x401, 0x6, 0x3, 0x3, 0x3, 0x1f, 0x5b66, 0x2, 0xc295, 0x8, 0xffff0000, 0xfffffffe, 0x8000, 0x3, 0x3, 0x7, 0x8, 0x8dc, 0x6, 0x9, 0x1, 0x20, 0x4, 0xa034, 0x2, 0x5, 0xfff, 0x2c, 0x8, 0xa05, 0x2, 0x400, 0xfff, 0x4, 0x7, 0xfffffffc, 0x33, 0x2, 0x9, 0x724, 0x3, 0x8], 0x27, ['[+\x00', 'netdevsim', ')#@{*\x00', '&.\\.\x00', '\x00', 'pci\x00', '{\x00', ':-\'$\x02,@}\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x448}, 0x1, 0x0, 0x0, 0x20040000}, 0x4080) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x5c, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7b}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7b9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r7, 0x3f59ae11e4a09849, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x40040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000012c0)={'wlan1\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x2c, r2, 0x220, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8cb}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x53b04c6a}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000814}, 0x20000000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xb4}]}, 0x28}}, 0x4) 02:07:59 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4020) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0) r4 = socket(0xb, 0x1, 0x3ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffffffff}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8c}]}, 0x68}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400) sendmsg$IEEE802154_START_REQ(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x6}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xa9}, @IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r4) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)={0x1b8, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x2}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4008011}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r10, 0x7c1608f7b799c322, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$AUDIT_SET(r7, &(0x7f0000000a00)={0xfffffffffffffffc, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x3e9, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x407aae54, 0x6, 0x4, 0x0, 0xfffffe01}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x52}, 0x20008801) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a80), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r12, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40400a4) 02:07:59 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x500, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="081e0e6c0b0a"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ba6b2ca7ad83"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x26004005}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x38}}, 0x40800) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x17}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x13}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x20040040) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r2, 0x504, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r1) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x27c, r3, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x104, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ca769e7aeae0e0c280e218846371f582f2be668c5e1762b53806cf286b01c849"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x20}, @NL802154_KEY_ATTR_ID={0xa4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8c69}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}]}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0dec5e35ebde31beb6e9ec8f301e469d3b99ab317da11d8f6b7f942c22bbe595"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xe4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x28}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1e}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a382443441cc3307889decd545a5d2e6"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e4b0c5d68e6b6b95ca1624c49c0f6c03b6cd9af5bc848af7de7df0b3d58568c3"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1d732cce949b4fff9a41250823c2b7e2"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x12}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3999b972ea4ce5f408689c4f741f34a5f7b448674131d1a6be6ebb82ae53b76c"}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x240000d0}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r2, 0x8, 0x70bd2c, 0xff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8050) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x664}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20080) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x21020010}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}}, 0x840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x440}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xfc, r5, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xb8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd37}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_MAC={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1d296b01}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xea}]}, 0xfc}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x5c, r4, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000004) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x54561a4d55e24155}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x48, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) [ 89.624261] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.626257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.627390] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.630208] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.632240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.633691] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.667822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.669187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.670990] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.675498] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.676907] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.677962] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.742580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.747545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.758518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.763383] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.765203] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 89.767845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.804006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.805679] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.807006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.810235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.813670] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 89.814884] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.823905] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.830398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.849712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.875072] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.877088] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 89.883393] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.887579] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.889503] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 89.890745] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.891178] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.894634] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.896405] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.897507] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.897885] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.898470] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 89.919682] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 89.922037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.924893] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.939690] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.954597] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.957489] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 89.961110] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 89.962255] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 89.968596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.698898] Bluetooth: hci0: command tx timeout [ 91.699854] Bluetooth: hci1: command tx timeout [ 91.826340] Bluetooth: hci2: command tx timeout [ 91.889386] Bluetooth: hci4: command tx timeout [ 92.017422] Bluetooth: hci3: command tx timeout [ 92.018576] Bluetooth: hci5: command tx timeout [ 92.019248] Bluetooth: hci6: command tx timeout [ 92.020128] Bluetooth: hci7: command tx timeout [ 93.745439] Bluetooth: hci0: command tx timeout [ 93.745943] Bluetooth: hci1: command tx timeout [ 93.876401] Bluetooth: hci2: command tx timeout [ 93.937547] Bluetooth: hci4: command tx timeout [ 94.066060] Bluetooth: hci7: command tx timeout [ 94.066635] Bluetooth: hci6: command tx timeout [ 94.067095] Bluetooth: hci3: command tx timeout [ 94.067768] Bluetooth: hci5: command tx timeout [ 95.794653] Bluetooth: hci1: command tx timeout [ 95.795846] Bluetooth: hci0: command tx timeout [ 95.921351] Bluetooth: hci2: command tx timeout [ 95.985849] Bluetooth: hci4: command tx timeout [ 96.115373] Bluetooth: hci6: command tx timeout [ 96.116731] Bluetooth: hci7: command tx timeout [ 96.116783] Bluetooth: hci3: command tx timeout [ 96.118537] Bluetooth: hci5: command tx timeout [ 97.842483] Bluetooth: hci0: command tx timeout [ 97.843049] Bluetooth: hci1: command tx timeout [ 97.973346] Bluetooth: hci2: command tx timeout [ 98.034390] Bluetooth: hci4: command tx timeout [ 98.161482] Bluetooth: hci7: command tx timeout [ 98.162064] Bluetooth: hci6: command tx timeout [ 98.162097] Bluetooth: hci3: command tx timeout [ 98.162608] Bluetooth: hci5: command tx timeout [ 152.542316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.545631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.546952] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.552447] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.554180] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 152.555431] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.570555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 152.573807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 152.576558] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 152.588121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 152.593728] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 152.595558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.597093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 152.599552] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.610467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.621015] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.624401] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.626610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.642583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 152.649572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 152.663571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 152.675557] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 152.677728] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 152.681541] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 152.727030] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.729533] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.730795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.740894] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.742979] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.744089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 152.851084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.854526] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.865590] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.867050] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.873418] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.887931] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.893428] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.897323] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 152.904580] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.906612] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 152.922657] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.961750] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.044825] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.049551] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.050742] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.057885] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.062478] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.063635] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 154.609460] Bluetooth: hci0: command tx timeout [ 154.674451] Bluetooth: hci2: command tx timeout [ 154.674466] Bluetooth: hci1: command tx timeout [ 154.737441] Bluetooth: hci3: command tx timeout [ 154.802504] Bluetooth: hci4: command tx timeout [ 155.057924] Bluetooth: hci6: command tx timeout [ 155.058535] Bluetooth: hci5: command tx timeout [ 155.185378] Bluetooth: hci7: command tx timeout [ 156.658324] Bluetooth: hci0: command tx timeout [ 156.721697] Bluetooth: hci1: command tx timeout [ 156.722330] Bluetooth: hci2: command tx timeout [ 156.785481] Bluetooth: hci3: command tx timeout [ 156.850077] Bluetooth: hci4: command tx timeout [ 157.105401] Bluetooth: hci6: command tx timeout [ 157.106370] Bluetooth: hci5: command tx timeout [ 157.233372] Bluetooth: hci7: command tx timeout [ 158.706610] Bluetooth: hci0: command tx timeout [ 158.769354] Bluetooth: hci1: command tx timeout [ 158.770827] Bluetooth: hci2: command tx timeout [ 158.835339] Bluetooth: hci3: command tx timeout [ 158.897519] Bluetooth: hci4: command tx timeout [ 159.153485] Bluetooth: hci6: command tx timeout [ 159.154461] Bluetooth: hci5: command tx timeout [ 159.282305] Bluetooth: hci7: command tx timeout [ 160.755437] Bluetooth: hci0: command tx timeout [ 160.817672] Bluetooth: hci2: command tx timeout [ 160.817812] Bluetooth: hci1: command tx timeout [ 160.882520] Bluetooth: hci3: command tx timeout [ 160.947352] Bluetooth: hci4: command tx timeout [ 161.204333] Bluetooth: hci5: command tx timeout [ 161.204352] Bluetooth: hci6: command tx timeout [ 161.329460] Bluetooth: hci7: command tx timeout [ 214.971992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.975618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.977899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.982221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.985723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.986811] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.038017] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.041638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.054445] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.062212] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.066672] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.068860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.110012] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 215.118940] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 215.133417] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 215.143069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 215.161046] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 215.166187] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 215.172670] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.236376] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.237388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.238578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.240083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.242618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.255787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.260078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.264651] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 215.265748] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.266869] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.269483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.378957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.380064] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 215.409858] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 215.421476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 215.427931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.429903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 215.430599] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 215.431935] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 215.432367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.449751] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 215.455071] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 215.456414] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 215.468853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.491876] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 215.537768] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 215.543745] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 215.689491] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.691748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.075356] Bluetooth: hci0: command tx timeout [ 217.138536] Bluetooth: hci1: command tx timeout [ 217.207015] Bluetooth: hci2: command tx timeout [ 217.330315] Bluetooth: hci4: command tx timeout [ 217.393409] Bluetooth: hci3: command tx timeout [ 217.585385] Bluetooth: hci7: command tx timeout [ 217.777404] Bluetooth: hci6: command tx timeout [ 217.778435] Bluetooth: hci5: command tx timeout [ 219.121553] Bluetooth: hci0: command tx timeout [ 219.186086] Bluetooth: hci1: command tx timeout [ 219.249622] Bluetooth: hci2: command tx timeout [ 219.377406] Bluetooth: hci4: command tx timeout [ 219.441965] Bluetooth: hci3: command tx timeout [ 219.633429] Bluetooth: hci7: command tx timeout [ 219.827326] Bluetooth: hci5: command tx timeout [ 219.827907] Bluetooth: hci6: command tx timeout [ 221.169432] Bluetooth: hci0: command tx timeout [ 221.235620] Bluetooth: hci1: command tx timeout [ 221.297426] Bluetooth: hci2: command tx timeout [ 221.425348] Bluetooth: hci4: command tx timeout [ 221.489382] Bluetooth: hci3: command tx timeout [ 221.681333] Bluetooth: hci7: command tx timeout [ 221.873400] Bluetooth: hci6: command tx timeout [ 221.874886] Bluetooth: hci5: command tx timeout [ 223.217328] Bluetooth: hci0: command tx timeout [ 223.281564] Bluetooth: hci1: command tx timeout [ 223.345474] Bluetooth: hci2: command tx timeout [ 223.473456] Bluetooth: hci4: command tx timeout [ 223.537829] Bluetooth: hci3: command tx timeout [ 223.729465] Bluetooth: hci7: command tx timeout [ 223.922306] Bluetooth: hci6: command tx timeout [ 223.922862] Bluetooth: hci5: command tx timeout [ 277.243812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.245382] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.248897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.251616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.253780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.254983] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.314834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.321053] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.323877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.328006] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.330514] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 277.334516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.374015] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 277.389581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 277.393518] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 277.434638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 277.441071] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 277.452465] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.454553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.462988] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.467655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.501182] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.502574] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 277.505794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 277.506879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.514024] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 277.526824] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 277.538539] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 277.552481] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 277.564915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 277.609891] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.620515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.647541] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.674809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.689725] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.705510] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.745100] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.757336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.761578] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.793166] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 277.794371] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.801635] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 277.803180] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 277.804991] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 277.827413] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 277.831903] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 277.833914] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 277.836699] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 279.282379] Bluetooth: hci0: command tx timeout [ 279.409356] Bluetooth: hci1: command tx timeout [ 279.473387] Bluetooth: hci2: command tx timeout [ 279.603294] Bluetooth: hci3: command tx timeout [ 279.729410] Bluetooth: hci5: command tx timeout [ 279.729440] Bluetooth: hci4: command tx timeout [ 279.857423] Bluetooth: hci6: command tx timeout [ 279.858493] Bluetooth: hci7: command tx timeout [ 281.329379] Bluetooth: hci0: command tx timeout [ 281.457406] Bluetooth: hci1: command tx timeout [ 281.521355] Bluetooth: hci2: command tx timeout [ 281.649320] Bluetooth: hci3: command tx timeout [ 281.777379] Bluetooth: hci4: command tx timeout [ 281.778306] Bluetooth: hci5: command tx timeout [ 281.905550] Bluetooth: hci7: command tx timeout [ 281.905729] Bluetooth: hci6: command tx timeout [ 283.377560] Bluetooth: hci0: command tx timeout [ 283.507077] Bluetooth: hci1: command tx timeout [ 283.571281] Bluetooth: hci2: command tx timeout [ 283.697419] Bluetooth: hci3: command tx timeout [ 283.825315] Bluetooth: hci5: command tx timeout [ 283.825370] Bluetooth: hci4: command tx timeout [ 283.954271] Bluetooth: hci6: command tx timeout [ 283.954462] Bluetooth: hci7: command tx timeout [ 285.426453] Bluetooth: hci0: command tx timeout [ 285.554306] Bluetooth: hci1: command tx timeout [ 285.618390] Bluetooth: hci2: command tx timeout [ 285.746419] Bluetooth: hci3: command tx timeout [ 285.873320] Bluetooth: hci4: command tx timeout [ 285.874746] Bluetooth: hci5: command tx timeout [ 286.001318] Bluetooth: hci6: command tx timeout [ 286.002856] Bluetooth: hci7: command tx timeout [ 337.746272] syz-executor.0 (9604) used greatest stack depth: 23712 bytes left [ 339.802509] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.809124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.812026] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.817929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.828121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 339.829783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 339.924335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.947338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.950344] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.960834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.962775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.964876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.031990] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.034438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.035801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.041021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.042475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.043635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.095943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.099749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.101557] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.109688] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.111661] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.113078] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.125434] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 340.128486] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 340.132713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.142525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.148746] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.151054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.190077] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 340.214806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 340.222462] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 340.234498] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 340.243547] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 340.253420] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 340.278852] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 340.312901] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 340.318163] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 340.340880] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 340.341886] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.354445] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 340.354681] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.368360] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.371515] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 340.384092] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.405427] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 340.407696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.874180] Bluetooth: hci0: command tx timeout [ 342.001551] Bluetooth: hci1: command tx timeout [ 342.067699] Bluetooth: hci2: command tx timeout [ 342.193437] Bluetooth: hci3: command tx timeout [ 342.195395] Bluetooth: hci4: command tx timeout [ 342.321765] Bluetooth: hci5: command tx timeout [ 342.513413] Bluetooth: hci6: command tx timeout [ 342.513793] Bluetooth: hci7: command tx timeout [ 343.921437] Bluetooth: hci0: command tx timeout [ 344.049386] Bluetooth: hci1: command tx timeout [ 344.113395] Bluetooth: hci2: command tx timeout [ 344.243279] Bluetooth: hci3: command tx timeout [ 344.244831] Bluetooth: hci4: command tx timeout [ 344.370757] Bluetooth: hci5: command tx timeout [ 344.561346] Bluetooth: hci7: command tx timeout [ 344.562310] Bluetooth: hci6: command tx timeout [ 345.969321] Bluetooth: hci0: command tx timeout [ 346.097349] Bluetooth: hci1: command tx timeout [ 346.162359] Bluetooth: hci2: command tx timeout [ 346.289521] Bluetooth: hci3: command tx timeout [ 346.289875] Bluetooth: hci4: command tx timeout [ 346.417900] Bluetooth: hci5: command tx timeout [ 346.609366] Bluetooth: hci6: command tx timeout [ 346.610045] Bluetooth: hci7: command tx timeout [ 348.018449] Bluetooth: hci0: command tx timeout [ 348.145352] Bluetooth: hci1: command tx timeout [ 348.209311] Bluetooth: hci2: command tx timeout [ 348.337316] Bluetooth: hci3: command tx timeout [ 348.337337] Bluetooth: hci4: command tx timeout [ 348.467362] Bluetooth: hci5: command tx timeout [ 348.657473] Bluetooth: hci7: command tx timeout [ 348.657635] Bluetooth: hci6: command tx timeout VM DIAGNOSIS: 02:13:08 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800e8ff8f8 RCX=ffffffff8176d57e RDX=ffff888012f03700 RSI=ffffffff8176d502 RDI=0000000000000006 RBP=dffffc0000000000 RSP=ffff88802423f910 R8 =0000000000000001 R9 =ffffed100124b33f R10=00000000000001bd R11=00000000000c33ea R12=00000000000001bf R13=00000000000001bd R14=ffff888033ff9a80 R15=ffff88800e8ff900 RIP=ffffffff8485d8c0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f7de377b540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f7de384c710 CR3=0000000026fae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00ffffffffffff0000000000000000 XMM01=0100010001000000ffffffffffffffff XMM02=0500050005000000455441564952505f XMM03=0000000000000000000000564952505f XMM04=00030005000500050005000000455441 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff868393c8 RDX=1ffff1100617be2c RSI=0000000000000001 RDI=0000000000000001 RBP=ffff888030bdf170 RSP=ffff888030bdf0a8 R8 =ffffffff868393cc R9 =ffff888030bdf158 R10=000000000003c001 R11=0000000000023c88 R12=ffff888030bdf178 R13=ffff888030bdf160 R14=0000000000000005 R15=ffff888030bdf118 RIP=ffffffff8114960a RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fcb745ca6f4 CR3=0000000033c66000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fcb745d947000007fcb745d8f20 XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000