Warning: Permanently added '[localhost]:25705' (ECDSA) to the list of known hosts. 2025/01/05 03:54:03 fuzzer started 2025/01/05 03:54:04 dialing manager at localhost:34561 syzkaller login: [ 72.322407] cgroup: Unknown subsys name 'net' [ 72.451562] cgroup: Unknown subsys name 'cpuset' [ 72.490556] cgroup: Unknown subsys name 'rlimit' 2025/01/05 03:54:23 syscalls: 210 2025/01/05 03:54:23 code coverage: enabled 2025/01/05 03:54:23 comparison tracing: enabled 2025/01/05 03:54:23 extra coverage: enabled 2025/01/05 03:54:23 setuid sandbox: enabled 2025/01/05 03:54:23 namespace sandbox: enabled 2025/01/05 03:54:23 Android sandbox: enabled 2025/01/05 03:54:23 fault injection: enabled 2025/01/05 03:54:23 leak checking: enabled 2025/01/05 03:54:23 net packet injection: enabled 2025/01/05 03:54:23 net device setup: enabled 2025/01/05 03:54:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/05 03:54:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/05 03:54:23 USB emulation: enabled 2025/01/05 03:54:23 hci packet injection: enabled 2025/01/05 03:54:23 wifi device emulation: enabled 2025/01/05 03:54:23 802.15.4 emulation: enabled 2025/01/05 03:54:23 fetching corpus: 0, signal 0/0 (executing program) 2025/01/05 03:54:25 starting 8 fuzzer processes 03:54:25 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) r1 = syz_io_uring_complete(0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) socket(0x18, 0x6, 0x6) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000080)={'netpci0\x00', @ifru_hwaddr=@broadcast}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f00000000c0)=0x9d0, 0x0, 0x4) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, @xdp={0x2c, 0x1, 0x0, 0x7}, @isdn={0x22, 0xf7, 0x8, 0x3, 0x40}, @isdn={0x22, 0x5, 0x7f, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)='veth0_to_team\x00', 0x1, 0x100000001, 0x8}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="828177de4bea"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x200001, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcc040}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) 03:54:25 executing program 1: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x81, 0x65}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x45}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x14, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20040040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x114, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x30, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x5}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x84, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x401}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40480d8}, 0xc1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r5 = syz_open_procfs(0x0, &(0x7f00000005c0)='numa_maps\x00') write$cgroup_netprio_ifpriomap(r5, &(0x7f0000000600)={'xfrm0', 0x32, 0x38}, 0x8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x7c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x7c}}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40020041}, 0x20040840) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0xbc, r11, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2f8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000885}, 0x4000015) 03:54:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008851}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x8f330944fda9682f, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x240008c4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x70, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x9}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x70}}, 0x2000c004) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x20000800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000740)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c}, 0x8840) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000008c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x94) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, r3, 0x400, 0x3, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x48d5}, 0x0) 03:54:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x885c) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x115, 0x80}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x62}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000c014}, 0x400c804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4090}, 0x2000c010) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000002900)={'sit0\x00', &(0x7f0000002880)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x7f, 0x9, 0x10, @remote, @mcast1, 0x7, 0x700, 0x20, 0x3f}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002980)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002a80)={&(0x7f00000029c0)={0xa8, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x8804) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x30, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x97f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48c0}, 0x44000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000002c00), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002c40)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r7, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x58, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040080}, 0x5) r8 = syz_open_dev$sg(&(0x7f0000002dc0), 0x7, 0x80840) ioctl$SCSI_IOCTL_SYNC(r8, 0x4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002f40)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e40)={0xa4, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 92.671081] audit: type=1400 audit(1736049266.007:7): avc: denied { execmem } for pid=274 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:54:26 executing program 4: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0xe2bddd44a6de096c, 0xf4, 0x7f, 0x105, 0x9, @private2, @private1, 0x8, 0x0, 0xffff, 0xc52e}}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x0, 0x4, 0x8, @mcast1, @local, 0x700, 0x8000, 0x401, 0x8001}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/udplite\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1cab123a66665f18}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1ff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40005}, 0x80) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001000)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000980)={0x62c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x5c0, 0x8, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x60, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}]}, {0x544, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @empty, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x450, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x8}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x62c}, 0x1, 0x0, 0x0, 0x45}, 0x4048004) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000001040)={'batadv_slave_1\x00', 0x0}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001080), 0x414f02, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r8, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r5, 0x507eb83aa07ab387, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) r9 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001380)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x1}, @can={0x1d, r3}, @isdn={0x22, 0xfa, 0x9, 0xcd, 0x6}, 0x3, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001340)='syzkaller0\x00', 0x7ff, 0x5, 0x4}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x78, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x10000000) sendmsg$NL80211_CMD_GET_SCAN(r4, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe331, 0x6f}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x24048815) 03:54:26 executing program 5: r0 = socket(0x26, 0xa, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000080)={0x4f0, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x60}}}}, [@NL80211_ATTR_TID_CONFIG={0x4d0, 0x11d, 0x0, 0x1, [{0x390, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x37c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xbc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x7}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x2}, {0x3, 0x2}, {0x3, 0xa}, {0x2, 0x4}, {0x6, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a2a, 0xfff, 0x7fff, 0x8, 0x7fff, 0xffff, 0x40, 0xfeff]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x6}, {0x0, 0xa}, {0x7, 0x3}, {0x0, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x5, 0x9}, {0x4, 0x2}, {0x6, 0x7}, {0x5, 0x7}, {0x7, 0xa}, {0x2, 0x8}, {0x2, 0x4}, {0x0, 0x2}, {0x1, 0x2}, {}, {0x1, 0x5}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x0, 0x5}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x3}, {0x4, 0x6}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x1, 0x1}, {0x4, 0x7}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x8}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x3, 0x8}, {0x0, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x4}, {0x6}, {0x6, 0x7}, {0x3}, {0x4, 0x6}, {0x1, 0x4}, {0x3, 0x6}, {0x4}, {0x0, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x3}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x9}, {0x5, 0x6}, {0x4, 0x3}, {0x7, 0xa}, {0x0, 0x2}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x5}, {0x1}, {0x5, 0x4}, {0x7, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x7}, {0x5, 0x5}, {0x6, 0x7}, {0x2, 0x4}, {}, {0x2, 0x3}, {0x1, 0xa}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0x2}, {0x0, 0x5}, {0x4}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x3, 0x8}, {0x3, 0xa}, {0x7, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x6}, {0x5, 0x4}, {0x1}, {0x1, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x5, 0x2}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x8}, {0x5, 0x6}, {0x3, 0x8}, {0x7, 0x4}, {0x3, 0x5}, {0x6, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x7}, {}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x5}, {0x1, 0x6}, {0x6, 0x9}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x0, 0x98d, 0x3, 0x18, 0x3ff, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x1b, 0x9, 0xb, 0x12, 0x6c, 0x36, 0x36, 0x48, 0x6, 0x6, 0x6c, 0x16, 0x60, 0x48, 0x9, 0x24, 0x6c, 0xb, 0x4, 0x0, 0xc]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x5, 0x0, 0x36, 0x6c, 0x16, 0x12, 0x4, 0x36, 0x30, 0x2, 0x6c, 0x48, 0x6c, 0x18, 0x9, 0x0, 0x24, 0x1, 0x1, 0xb, 0x1b, 0x48, 0x12, 0x1, 0x1b]}]}, @NL80211_BAND_2GHZ={0x118, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x0, 0x3, 0x24, 0x48, 0x4, 0x30, 0x4, 0x18, 0x1b, 0x5e, 0x16, 0x1, 0x30, 0x3, 0x18, 0x1b, 0x69, 0xb, 0x68, 0x16, 0x36, 0x30, 0x9, 0x12, 0x1, 0x9, 0xb, 0x48, 0x6c, 0x48, 0xc]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x3}, {0x7, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x3}, {0x1, 0x4}, {0x2, 0x7}, {0x4, 0xa}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x4, 0xa}, {0x2}, {0x6, 0x5}, {0x5, 0x7}, {0x0, 0x9}, {0x3, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x2, 0x9}, {0x7, 0x6}, {0x0, 0x4}, {0x3, 0x3}, {0x0, 0x8}, {0x2, 0x5}, {0x5, 0x1}, {0x6, 0x8}, {0x7, 0x9}, {0x4, 0x1}, {0x6}, {}, {0x6}, {0x2}, {0x1, 0x9}, {0x3, 0x7}, {0x4, 0xa}, {0x5, 0x4}, {0x5}, {0x5, 0x8}, {0x6, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0x3}, {0x4, 0x4}, {0x3, 0x1}, {0x3, 0x5}, {0x6, 0xa}, {0x1, 0x8}, {0x4, 0x1}, {0x0, 0x4}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x5}, {0x7, 0x4}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x7f, 0x8, 0x7, 0x2, 0x800, 0x9]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x1b, 0x5, 0x16, 0x18, 0x30, 0x9, 0x48, 0x48, 0x6, 0x60, 0x6, 0x3, 0x12, 0x6c, 0x2, 0xc, 0x6c, 0x1, 0x5, 0xf, 0x30, 0xb, 0x16, 0x5, 0x48, 0x48, 0x6]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x2}, {0x7, 0x8}, {0x0, 0x7}, {0x1}, {0x6, 0xa}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x6, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x6, 0x6}, {0x3, 0x3}, {0x7}, {0x3, 0x9}, {0x0, 0x6}, {0x0, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xee442b5e47e83a5e, 0x35, 0x56f6d0c025a0e527, 0x15, 0x5, 0x36, 0x60]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{}, {0x3, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x6}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x2}, {0x1, 0x3}, {0x3, 0x3}, {0x1, 0x9}, {0x0, 0x8}, {0x3, 0x2}, {0x0, 0xa}, {}, {0x7, 0x9}, {0x5, 0x4}, {0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x1, 0x2}, {0x5, 0x9}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x4}, {}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x1, 0x6}, {0x7, 0x8}, {0x1, 0x8}, {0x2, 0x6}, {0x7, 0x8}, {0x0, 0x9}, {0x3}, {0x3, 0x2}]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x18, 0x4, 0x60, 0x18, 0x1b]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x3]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0xa}, {}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x4}, {0x2, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x48, 0x1, 0x16, 0x3, 0x2, 0x48, 0x9, 0x18, 0x6, 0x3, 0x18, 0x4]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x2, 0x8}, {0x5}, {0x3, 0x15}, {0x3, 0xa}, {0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x7, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x3}]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x3}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x1, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x6}, {0x3}, {0x5, 0x1}, {0x7, 0x4}, {0x0, 0x8}, {0x4}, {0x3, 0xa}, {0x0, 0x4}, {0x4}, {0x1, 0x3}, {0x0, 0x4}, {0x1}, {0x0, 0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x7}, {0x6}, {0x7, 0x6}, {0x0, 0x8}, {0x4, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x6}, {0x4, 0x7}, {0x6}, {0x6, 0x8}, {0x7, 0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x3}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {}, {0x3, 0x2}, {0x2, 0x8}, {0x7}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0xa}, {0x7}, {0x6}]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0xa, 0x2, [{0x0, 0x7}, {0x4, 0x6}, {0x1, 0x4}, {0x5, 0x2}, {}, {0x7}]}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0xa}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0x1}, {0x5, 0x5}, {0x4, 0x3}, {0x4, 0x9}, {0x0, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x1, 0x2}, {0x4, 0x4}, {0x1}, {0x0, 0x1}, {0x7, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x4, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x5}, {0x3, 0x9}, {0x6, 0x3}, {0x6, 0x8}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x9}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x4}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x1}, {0x7, 0x4}, {0x5, 0x3}, {0x0, 0xa}, {0x7, 0x4}, {0x3, 0x5}, {0x7, 0x2}, {0x2}, {0x1, 0x7}, {0x3, 0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x8001, 0x5, 0x101, 0xfffd, 0x4, 0xfff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x400, 0x4, 0x9, 0xfff, 0x0, 0x20, 0x20]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x84, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x1, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x6, 0x2}, {0x3, 0x9}, {0x4, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0x5}, {0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x7, 0x4}, {0x6, 0x4}, {0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x7, 0xa}, {0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x4}, {0x3, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x3}, {0x2, 0x2}, {0x6, 0xa}, {}, {0x3, 0x8}, {0x6, 0x3}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x7}, {0x5, 0x5}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x5}, {0x7, 0x4}, {0x3, 0x7}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x3}, {0x3, 0x3}, {0x6, 0x7}, {0x2, 0xa}]}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x68, 0x0, 0x6, 0x1, 0x4, 0xe1d, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x2, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11b1, 0x7, 0x0, 0x101, 0x2, 0x6, 0xb, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x3, 0x5, 0x60, 0x2, 0x1, 0x48, 0x24, 0x6, 0x6c, 0x24, 0x24]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x3, 0x5, 0x9, 0x25, 0x16, 0x9, 0x1b, 0x69, 0x0, 0x6, 0x18, 0x60, 0x30, 0xb, 0x1, 0x3, 0x12, 0xb, 0x1, 0x42, 0x16, 0x0, 0x12, 0x24, 0xb, 0x5, 0x60, 0x1b, 0x30, 0x36, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xff, 0x5, 0x8, 0x1ff, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x8, 0x2, 0x5, 0x8000, 0x7, 0x1141]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1e}]}]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000600)=0x6, 0x4) r2 = socket(0xf, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r1, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}}, 0x4008000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040084}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x1) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1020000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x48, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1a7}]}, 0x48}, 0x1, 0x0, 0x0, 0x20020004}, 0x4000) recvmmsg(r5, &(0x7f0000000e80)=[{{&(0x7f0000000a00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a80)=""/131, 0x83}, {&(0x7f0000000b40)=""/143, 0x8f}], 0x2, &(0x7f0000000c40)=""/7, 0x7}, 0x3e58000}, {{&(0x7f0000000c80)=@nfc_llcp, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d00)=""/2, 0x2}, {&(0x7f0000000d40)=""/181, 0xb5}], 0x2, &(0x7f0000000e40)=""/12, 0xc}, 0xed0f}], 0x2, 0x13002, &(0x7f0000000f00)={0x0, 0x3938700}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r2) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmsg$NL80211_CMD_NOTIFY_RADAR(r5, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x44000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x7c, 0x0, 0xc9b54142d1e0a2fc, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000880) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000012c0)=0x6, 0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001340), r7) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x40, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20008005) 03:54:26 executing program 6: sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @local}]}, 0x1c}}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8084}, 0x44000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r2 = syz_io_uring_complete(0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x20, 0x0, 0x100, 0x70bd26, 0xfffffffc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x884) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x22}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x0, 0x800, 0x10001, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000010) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000840), 0x395500, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x204, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "bd4533a03da3d3750c8e3dc87649bbee"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7ff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r6 = getuid() mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x10000, &(0x7f0000000b40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@debug={'debug', 0x3d, 0xfffffffffffffffe}}, {@dfltuid={'dfltuid', 0x3d, r6}}, {@cache_loose}, {@access_any}, {@cache_fscache}], [{@appraise_type}, {@euid_eq}, {@smackfsfloor={'smackfsfloor', 0x3d, '\')-'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x8000]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0xc051) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x840) 03:54:26 executing program 7: ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x9, 0xff, 0x3, 0x15, @dev={0xfe, 0x80, '\x00', 0x1f}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x40, 0x73, 0x100}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0xb00, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xd8, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0xa4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3f}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa5cf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a599dc660d5002b10243acd097dccee38149c6babb54f331f68ee9acf8dc755"}]}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xd8}}, 0x40000d0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40895}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}}, 0x810) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48810}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x8c) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b80)={'syztnl1\x00', &(0x7f0000000b00)={'ip6tnl0\x00', r0, 0x4, 0x1, 0x6, 0xfff, 0x0, @private1, @loopback, 0x700, 0x10, 0x1, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000c40)={'ip6_vti0\x00', &(0x7f0000000bc0)={'syztnl0\x00', r0, 0x2f, 0x9d, 0xf3, 0x2, 0x13, @private1, @rand_addr=' \x01\x00', 0x7800, 0x7, 0x3, 0x80}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000d00)={'sit0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', r0, 0x2f, 0x81, 0x3f, 0x3f, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x40, 0xf840, 0x2, 0x40}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xf0, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r9 = syz_io_uring_complete(0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f0000000f00)={0x0, @hci={0x1f, 0xffffffffffffffff}, @generic={0xb, "2635a9a1aa86edb1edabfb821ae3"}, @l2={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7f, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ec0)='team_slave_0\x00', 0xdd, 0x23, 0x800}) [ 94.125089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.131672] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.135890] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.144959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.150959] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.156685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.181702] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.198092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.200441] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.203101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.206456] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.209032] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.211119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.215848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.217682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.220501] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.223591] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.237505] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.254729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.257344] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.279651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.291962] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.294808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.296694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.298497] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.301085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.304435] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.306269] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.316755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.321390] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.323802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.350639] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.372041] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.377531] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.401575] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.406572] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.409033] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.411133] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.418845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.420755] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.423661] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.425580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 94.427833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.430351] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.432795] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.455570] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.500627] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.522867] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 96.210744] Bluetooth: hci0: command tx timeout [ 96.275645] Bluetooth: hci1: command tx timeout [ 96.338331] Bluetooth: hci2: command tx timeout [ 96.402409] Bluetooth: hci4: command tx timeout [ 96.403393] Bluetooth: hci3: command tx timeout [ 96.530411] Bluetooth: hci6: command tx timeout [ 96.531358] Bluetooth: hci5: command tx timeout [ 96.659372] Bluetooth: hci7: command tx timeout [ 98.258257] Bluetooth: hci0: command tx timeout [ 98.325241] Bluetooth: hci1: command tx timeout [ 98.386351] Bluetooth: hci2: command tx timeout [ 98.450267] Bluetooth: hci3: command tx timeout [ 98.450695] Bluetooth: hci4: command tx timeout [ 98.578354] Bluetooth: hci6: command tx timeout [ 98.578816] Bluetooth: hci5: command tx timeout [ 98.706345] Bluetooth: hci7: command tx timeout [ 100.307233] Bluetooth: hci0: command tx timeout [ 100.370497] Bluetooth: hci1: command tx timeout [ 100.434270] Bluetooth: hci2: command tx timeout [ 100.498354] Bluetooth: hci4: command tx timeout [ 100.499114] Bluetooth: hci3: command tx timeout [ 100.626281] Bluetooth: hci5: command tx timeout [ 100.626317] Bluetooth: hci6: command tx timeout [ 100.754437] Bluetooth: hci7: command tx timeout [ 102.355249] Bluetooth: hci0: command tx timeout [ 102.418283] Bluetooth: hci1: command tx timeout [ 102.482361] Bluetooth: hci2: command tx timeout [ 102.546397] Bluetooth: hci4: command tx timeout [ 102.547199] Bluetooth: hci3: command tx timeout [ 102.674374] Bluetooth: hci5: command tx timeout [ 102.674842] Bluetooth: hci6: command tx timeout [ 102.802344] Bluetooth: hci7: command tx timeout [ 156.894833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.901045] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.904494] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.913602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.917302] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.920659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.954541] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.956332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.958530] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.966387] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.973463] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.974416] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.975726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.977718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.980768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.987965] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.996506] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.998942] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.039845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.043562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.053433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.056268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.063034] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.064694] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.066271] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.067180] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 157.077382] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.085456] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.094474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.095741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.155972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.162833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.164848] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.169277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.170327] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.172754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.175654] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.178085] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.179587] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.181545] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.183138] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.184687] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.185642] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.206400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.224856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.311722] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.319505] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.335669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.994256] Bluetooth: hci0: command tx timeout [ 159.058270] Bluetooth: hci1: command tx timeout [ 159.058893] Bluetooth: hci2: command tx timeout [ 159.125236] Bluetooth: hci3: command tx timeout [ 159.186259] Bluetooth: hci4: command tx timeout [ 159.315264] Bluetooth: hci5: command tx timeout [ 159.315858] Bluetooth: hci7: command tx timeout [ 159.379221] Bluetooth: hci6: command tx timeout [ 161.042280] Bluetooth: hci0: command tx timeout [ 161.106258] Bluetooth: hci2: command tx timeout [ 161.106713] Bluetooth: hci1: command tx timeout [ 161.171243] Bluetooth: hci3: command tx timeout [ 161.234265] Bluetooth: hci4: command tx timeout [ 161.363259] Bluetooth: hci7: command tx timeout [ 161.363759] Bluetooth: hci5: command tx timeout [ 161.426438] Bluetooth: hci6: command tx timeout [ 163.090719] Bluetooth: hci0: command tx timeout [ 163.154392] Bluetooth: hci1: command tx timeout [ 163.154954] Bluetooth: hci2: command tx timeout [ 163.218355] Bluetooth: hci3: command tx timeout [ 163.282274] Bluetooth: hci4: command tx timeout [ 163.410335] Bluetooth: hci5: command tx timeout [ 163.411682] Bluetooth: hci7: command tx timeout [ 163.474272] Bluetooth: hci6: command tx timeout [ 165.139325] Bluetooth: hci0: command tx timeout [ 165.203353] Bluetooth: hci2: command tx timeout [ 165.204399] Bluetooth: hci1: command tx timeout [ 165.266530] Bluetooth: hci3: command tx timeout [ 165.330725] Bluetooth: hci4: command tx timeout [ 165.458619] Bluetooth: hci7: command tx timeout [ 165.459651] Bluetooth: hci5: command tx timeout [ 165.525477] Bluetooth: hci6: command tx timeout [ 218.928282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.931620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.945279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.951696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.956591] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.961780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.963732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.965540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.967673] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.986819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.995821] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.998584] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.105961] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.112505] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.114944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.130467] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.134550] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.142818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.165393] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.168067] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.172568] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.174724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.180532] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.184210] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.185938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.196420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.214893] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.240537] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.257386] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.263885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.265370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.267523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.268920] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.271512] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.278043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.285000] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.289466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.292098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.297413] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.310014] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.319482] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.324570] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.339279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.348653] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.357684] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.362779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.366381] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.368541] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 221.010371] Bluetooth: hci0: command tx timeout [ 221.074449] Bluetooth: hci1: command tx timeout [ 221.202214] Bluetooth: hci3: command tx timeout [ 221.266257] Bluetooth: hci2: command tx timeout [ 221.330405] Bluetooth: hci4: command tx timeout [ 221.522383] Bluetooth: hci5: command tx timeout [ 221.523340] Bluetooth: hci7: command tx timeout [ 221.842258] Bluetooth: hci6: command tx timeout [ 223.058231] Bluetooth: hci0: command tx timeout [ 223.122215] Bluetooth: hci1: command tx timeout [ 223.252248] Bluetooth: hci3: command tx timeout [ 223.314230] Bluetooth: hci2: command tx timeout [ 223.378272] Bluetooth: hci4: command tx timeout [ 223.570456] Bluetooth: hci5: command tx timeout [ 223.570914] Bluetooth: hci7: command tx timeout [ 223.890225] Bluetooth: hci6: command tx timeout [ 225.106306] Bluetooth: hci0: command tx timeout [ 225.170369] Bluetooth: hci1: command tx timeout [ 225.298476] Bluetooth: hci3: command tx timeout [ 225.362424] Bluetooth: hci2: command tx timeout [ 225.426296] Bluetooth: hci4: command tx timeout [ 225.618259] Bluetooth: hci7: command tx timeout [ 225.618772] Bluetooth: hci5: command tx timeout [ 225.938299] Bluetooth: hci6: command tx timeout [ 227.154359] Bluetooth: hci0: command tx timeout [ 227.218210] Bluetooth: hci1: command tx timeout [ 227.346332] Bluetooth: hci3: command tx timeout [ 227.410795] Bluetooth: hci2: command tx timeout [ 227.476184] Bluetooth: hci4: command tx timeout [ 227.666224] Bluetooth: hci7: command tx timeout [ 227.666720] Bluetooth: hci5: command tx timeout [ 227.986230] Bluetooth: hci6: command tx timeout [ 280.992047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.000769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.007009] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.011428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.014047] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.016260] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.120874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.126637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.129075] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.138517] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.142203] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.144685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.185825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.190531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.192414] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.196410] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.198852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.200639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.287927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.306698] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.312317] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.327592] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.329358] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.332424] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.336468] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.339349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.347523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.351343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.354928] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.361223] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.389416] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.391059] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.407894] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.411553] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.414244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.415841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.437693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.461062] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.481757] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.483444] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.502051] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.508340] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.511668] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.513941] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.516345] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.518479] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.526950] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.529897] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.090438] Bluetooth: hci0: command tx timeout [ 283.218264] Bluetooth: hci1: command tx timeout [ 283.282358] Bluetooth: hci2: command tx timeout [ 283.474393] Bluetooth: hci4: command tx timeout [ 283.474685] Bluetooth: hci5: command tx timeout [ 283.540180] Bluetooth: hci7: command tx timeout [ 283.540229] Bluetooth: hci3: command tx timeout [ 283.668197] Bluetooth: hci6: command tx timeout [ 285.138327] Bluetooth: hci0: command tx timeout [ 285.266398] Bluetooth: hci1: command tx timeout [ 285.330206] Bluetooth: hci2: command tx timeout [ 285.522428] Bluetooth: hci4: command tx timeout [ 285.524182] Bluetooth: hci5: command tx timeout [ 285.586776] Bluetooth: hci3: command tx timeout [ 285.587195] Bluetooth: hci7: command tx timeout [ 285.714203] Bluetooth: hci6: command tx timeout [ 287.186282] Bluetooth: hci0: command tx timeout [ 287.314248] Bluetooth: hci1: command tx timeout [ 287.378215] Bluetooth: hci2: command tx timeout [ 287.570301] Bluetooth: hci5: command tx timeout [ 287.570800] Bluetooth: hci4: command tx timeout [ 287.634190] Bluetooth: hci3: command tx timeout [ 287.637147] Bluetooth: hci7: command tx timeout [ 287.762229] Bluetooth: hci6: command tx timeout [ 289.234480] Bluetooth: hci0: command tx timeout [ 289.363938] Bluetooth: hci1: command tx timeout [ 289.427215] Bluetooth: hci2: command tx timeout [ 289.621224] Bluetooth: hci4: command tx timeout [ 289.622065] Bluetooth: hci5: command tx timeout [ 289.706618] Bluetooth: hci7: command tx timeout [ 289.706625] Bluetooth: hci3: command tx timeout [ 289.810393] Bluetooth: hci6: command tx timeout [ 343.267540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 343.274659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 343.278574] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 343.287781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 343.293639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 343.299955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 343.519726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 343.526921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 343.530493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 343.541452] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 343.547667] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 343.551553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.593938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.598271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.600373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.609774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.614497] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.623888] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.654361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.657765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.662783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.664843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.666859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.668681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.674014] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.676760] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.679889] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.690645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.694868] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.696801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.740207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.760245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.763222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.768355] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.770474] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.772688] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.779657] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.784516] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.786350] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.789790] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 343.795881] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.798033] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.812233] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.827891] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.838609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.888757] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.891599] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.893543] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 345.362278] Bluetooth: hci0: command tx timeout [ 345.622460] Bluetooth: hci1: command tx timeout [ 345.746313] Bluetooth: hci2: command tx timeout [ 345.811326] Bluetooth: hci3: command tx timeout [ 345.812779] Bluetooth: hci4: command tx timeout [ 345.874272] Bluetooth: hci6: command tx timeout [ 345.938237] Bluetooth: hci5: command tx timeout [ 346.002374] Bluetooth: hci7: command tx timeout [ 347.411184] Bluetooth: hci0: command tx timeout [ 347.666302] Bluetooth: hci1: command tx timeout [ 347.794203] Bluetooth: hci2: command tx timeout [ 347.858251] Bluetooth: hci4: command tx timeout [ 347.858755] Bluetooth: hci3: command tx timeout [ 347.922275] Bluetooth: hci6: command tx timeout [ 347.986265] Bluetooth: hci5: command tx timeout [ 348.050208] Bluetooth: hci7: command tx timeout [ 349.460166] Bluetooth: hci0: command tx timeout [ 349.715158] Bluetooth: hci1: command tx timeout [ 349.842260] Bluetooth: hci2: command tx timeout [ 349.907073] Bluetooth: hci4: command tx timeout [ 349.907630] Bluetooth: hci3: command tx timeout [ 349.970220] Bluetooth: hci6: command tx timeout [ 350.034253] Bluetooth: hci5: command tx timeout [ 350.098170] Bluetooth: hci7: command tx timeout [ 351.512764] Bluetooth: hci0: command tx timeout [ 351.763197] Bluetooth: hci1: command tx timeout [ 351.890196] Bluetooth: hci2: command tx timeout [ 351.954270] Bluetooth: hci3: command tx timeout [ 351.954358] Bluetooth: hci4: command tx timeout [ 352.019253] Bluetooth: hci6: command tx timeout [ 352.082173] Bluetooth: hci5: command tx timeout [ 352.146302] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:59:33 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000001 RCX=ffffffff86ae9ab2 RDX=1ffff11006346f1e RSI=1ffff11006346f20 RDI=1ffff11006346f20 RBP=ffff888031a37900 RSP=ffff888031a37838 R8 =ffffffff86ae9ab6 R9 =ffff888031a378e8 R10=000000000003aab6 R11=00000000000954bf R12=ffff888031a37908 R13=ffff888031a378f0 R14=ffff888031a37ef8 R15=ffff888031a378a8 RIP=ffffffff8134a683 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555620d5400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f244023a4a1 CR3=000000001ad2c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000ff0000000000 XMM02=000000ff0000000000000000ff000000 XMM03=0000000000000000000000ff00000000 XMM04=0000000000000000ff00000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000337 RCX=ffffffff814ff5e7 RDX=fffffbfff0fdfbf1 RSI=0000000000000008 RDI=ffffffff87efdf80 RBP=ffff888018dba608 RSP=ffff888009c97810 R8 =0000000000000000 R9 =fffffbfff0fdfbf0 R10=ffffffff87efdf87 R11=0000000000000000 R12=0000000000000005 R13=dffffc0000000000 R14=ffff888018db9bc0 R15=0000000000000000 RIP=ffffffff814ff5ef RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f558a001540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f558a4c1000 CR3=000000003015c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035 XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000