Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:29146' (ECDSA) to the list of known hosts. 2025/01/06 02:59:42 fuzzer started 2025/01/06 02:59:43 dialing manager at localhost:34561 syzkaller login: [ 69.945963] cgroup: Unknown subsys name 'net' [ 70.019761] cgroup: Unknown subsys name 'cpuset' [ 70.040154] cgroup: Unknown subsys name 'rlimit' 2025/01/06 03:00:04 syscalls: 210 2025/01/06 03:00:04 code coverage: enabled 2025/01/06 03:00:04 comparison tracing: enabled 2025/01/06 03:00:04 extra coverage: enabled 2025/01/06 03:00:04 setuid sandbox: enabled 2025/01/06 03:00:04 namespace sandbox: enabled 2025/01/06 03:00:04 Android sandbox: enabled 2025/01/06 03:00:04 fault injection: enabled 2025/01/06 03:00:04 leak checking: enabled 2025/01/06 03:00:04 net packet injection: enabled 2025/01/06 03:00:04 net device setup: enabled 2025/01/06 03:00:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/06 03:00:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/06 03:00:04 USB emulation: enabled 2025/01/06 03:00:04 hci packet injection: enabled 2025/01/06 03:00:04 wifi device emulation: enabled 2025/01/06 03:00:04 802.15.4 emulation: enabled 2025/01/06 03:00:04 fetching corpus: 0, signal 0/0 (executing program) 2025/01/06 03:00:07 starting 8 fuzzer processes 03:00:07 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="7dd50f62859224e82074ad31fa5243674991df6b55806fc82d3ce13433fda14589c3391ba3c3f8a1d1fa5183cc1a80f50bffd1e9a1b099f2aaac8b9c7e46daf53acfe186d6a716d679ced3aec2fee035e49ae0ab566579035be56ac887d42322e50e217ab686c523667891472ba14f2b46f2218ed09cee340407eda740ff9f1fe69a05d614c253afde9472f40b15c2de1166cbc745588865e81cf88b98a734b8f9276c7ff0dba5c5fb7e30a3731bec642e3139e31c0b8030301572212a76", 0xbe) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x7, 0x20, 0x53b, 0x800, {{0x41, 0x4, 0x1, 0x5, 0x104, 0x68, 0x0, 0x0, 0x2f, 0x0, @multicast2, @remote, {[@lsrr={0x83, 0x27, 0xa0, [@rand_addr=0x64010101, @empty, @loopback, @loopback, @broadcast, @multicast1, @empty, @broadcast, @private=0xa010102]}, @end, @timestamp_prespec={0x44, 0x54, 0x61, 0x3, 0x6, [{@multicast2, 0x65a}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0x9}, {@loopback, 0x5}, {@empty, 0x47909248}, {@private=0xa010101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc8e}, {@local, 0x1}, {@empty, 0x5}, {@private=0xa010100, 0x9}]}, @lsrr={0x83, 0x1f, 0xd, [@broadcast, @empty, @multicast2, @local, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1f}]}, @timestamp_prespec={0x44, 0x34, 0x52, 0x3, 0x7, [{@broadcast, 0x800}, {@loopback, 0xfd}, {@dev={0xac, 0x14, 0x14, 0xa7}, 0x2}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8001}, {@multicast1}]}, @end, @lsrr={0x83, 0x1f, 0x4a, [@empty, @rand_addr=0x64010102, @local, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', r1, 0x2f, 0x40, 0x1, 0x3ff, 0x0, @private1, @mcast1, 0x8000, 0x8000, 0x1, 0x8}}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', r1, 0x29, 0x81, 0x8d, 0x100, 0x4, @loopback, @loopback, 0x20, 0x80, 0x60a, 0x6}}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000480)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @private0={0xfc, 0x0, '\x00', 0xf1}, 0x0, 0x7, 0x6, 0x0, 0x6, 0x86000100, r4}) r5 = accept4$inet6(r2, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, &(0x7f0000000540)=0x1c, 0x80000) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000580)={@empty}, &(0x7f00000005c0)=0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000600)={'icmp\x00'}, &(0x7f0000000640)=0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000700)={0x89, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @pad1, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x40) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r8, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020000}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) 03:00:07 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000)={'ip_vti0', 0x32, 0x35}, 0xa) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@private1, r0}, 0x14) r1 = socket(0x11, 0x2, 0xff) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x9c5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x7, [0x20, 0x2, 0x5, 0x101, 0x1ff, 0x80, 0x3, 0x1ff]}, 0x5c) r2 = socket$inet6(0xa, 0x4, 0x4) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x32}, 0x401}, {0xa, 0x4e23, 0x0, @mcast1, 0x200}, 0x8000, [0x4, 0x10001, 0x3ff, 0x6, 0x6, 0x3, 0x7, 0x40]}, 0x5c) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000200)={@remote}, &(0x7f0000000240)=0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f00000002c0)=0x1e) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000340)=0x14) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000380), 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', r3, 0x8000, 0x20, 0x3f, 0x47, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x65, 0x1, 0x4, 0x2f, 0x0, @loopback, @multicast1, {[@cipso={0x86, 0xa, 0x1, [{0x7, 0x4, "8163"}]}, @cipso={0x86, 0x24, 0x3, [{0x0, 0xf, "d23e318dafdc5b4deec10bf7b9"}, {0x2, 0x7, "8c0d75f41c"}, {0x1, 0x8, "17316717a7cd"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x9a, 0x0, 0x7, [0x401, 0x6, 0x1ff, 0x5, 0x3, 0xfff]}]}}}}}) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f00000004c0)={0xbbe2, {{0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x5, 0x3ff, 0x31, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0xd}, 0x20, 0x700, 0xef, 0x7f}}) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000004}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x15c, 0x12, 0x100, 0x70bd2d, 0x25dfdbfb, {0xb, 0x9, 0x4, 0x0, {0x4e22, 0x4e22, [0x7, 0x7e0, 0x1, 0x5], [0x40, 0x1, 0x2, 0x3], r4, [0x1f, 0x4]}, 0x1c, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xc3, 0x1, "311215d6fb87bfd1c86bd6967cd4f8ac37c825938b04cb898cd7a0ac4a04a6a5d15e74965664de027953c6d7d5a0d24eb438c7b12e30af9f7c69170c13b0a82d00c1fd813d10ef79a842f61dcafda48f10961c8c043005a383a9e725d7d3afc5ee126154f3eb7c16f400d961ea87e4ec1d55398d8e42ea4f57ecd921cbabfb5d5a8683cb6fc92073ec280713d708032b6a25a1c826f5a4a3ff03a218848798795eaf98c46ec9bab46697a3e88595baeb6f33f9ff71340280acbcad1e39a018"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "b6739c43dc4c17e31daa402ed3aac14879e6e9ceab18333cb3bc48b5a1498c0d7dc0de41b2c1c49b4187e7d70b0ddc5b4aaba8cf9e03d8178c2863d85eeadc3d6d9448b6c43f6f"}]}, 0x15c}}, 0xe23a2d3efc29f5c0) r5 = socket$inet(0x2, 0xa, 0x2000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000880)) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000000900)={0x80, 0x5, 0xa0000000, 0x1, 0x0, 0x1}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000940)={0x1, 0x5, '\x00', [@enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x3a4a}, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x1, [0x0]}, @pad1, @ra={0x5, 0x2, 0xca62}]}, 0x38) 03:00:07 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r1, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x0) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x4, 0x4, 0x2}, 0x8}}, 0x18) write$P9_RLOPEN(r3, &(0x7f0000000200)={0x18, 0xd, 0x1, {{0x2, 0x3}, 0xc16d}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x0, 0x20b, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x158, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9129}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000680)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r11, 0x80810aa0e23f9622, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44845}, 0x80) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f00000009c0)={&(0x7f0000000900), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44844}, 0x400008c0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x78, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x10}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nbd\x00'}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\'\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004}, 0x4080) 03:00:07 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "92e89acb73277dcb9bdda866012b85ba"}, @NL80211_ATTR_PMKID={0x14, 0x55, "aa46b7d0b6336b8634c3838938cc5337"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1d8, r0, 0x800, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xbf, 0x44}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2fd2f22a}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x100}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4fab}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7e}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x800}]}, @NL80211_ATTR_CQM={0x78, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x7fff, 0x9a]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_RSSI_THOLD={0x2c, 0x1, [0x7, 0x9, 0x9, 0x0, 0x101, 0x0, 0x4, 0x1, 0x800, 0x34]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0x5c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x80000001, 0x6, 0x4, 0x5, 0xffffd6dd]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x28, 0x1, [0x1, 0xd1, 0x6, 0x400, 0xc8, 0x17e5f051, 0x5, 0x1, 0xfffffff8]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x33}]}, @NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7fff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x20}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x565}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x6}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xdc3}]}]}, 0x1d8}}, 0x4) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0xc051}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x80, 0x5a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c004}, 0x4000800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xf4, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xa4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "142a31d6777b351d9a6ce12b9bfe75c31c69fe2dff9fd571f9004dd3b375a530"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8d1dce0c534b665e7a23d3b0e80879e924593dd149c727184bb7574e22a7e3e8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe98}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2ae2abf5103cd271e7d5a664b9f63092"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r4 = socket(0x25, 0x2, 0x2932) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0xc8, r0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x1c}}}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffffffb}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x30, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x5, 0x1, 0xb2, 0x13f80]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6d3}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0xfffffffb]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x3, 0x80000001, 0x0, 0xffffffff, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1ff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x10001}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200000}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x4040800) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x1}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x2}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7f}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008840}, 0x8011) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x34, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) syz_genetlink_get_family_id$nbd(&(0x7f0000000ec0), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x40, r1, 0x220, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400c5}, 0x40044) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x74, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x118bcb1496a2fed}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 03:00:07 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x4080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000500), r2) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, r8, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xac906267d18e6fd}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x22000041) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r3, 0x28, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x240080c0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r10, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x85}, 0x0) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r7) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f0000000a00)={&(0x7f00000008c0), 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x40, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x800) [ 92.946265] audit: type=1400 audit(1736132407.480:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:00:07 executing program 5: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x48084}, 0x40090) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000400)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x2404c041) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r2) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r6, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x20}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20902}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x7}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x3f}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x9}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x15) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r7) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r8, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, r9, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}}, 0x801) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x48014}, 0x4000004) 03:00:07 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x100, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x98, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xba7921da0227bb91}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7ff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdc}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x100}, 0x1, 0x0, 0x0, 0x2004c801}, 0x4000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x28}, 0x1, 0x0, 0x0, 0x40041}, 0x4000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x70, 0x0, 0x200, 0x3f, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x2080}, 0x4000811) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "b0c9d5371da8cf10bec0208ae9b6b963"}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40090}, 0x20000000) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfff}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x48840}, 0x8004) sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000900)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xa0, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3f}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4001000) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x54, r7, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan3\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}]}, 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x4000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c40), r8) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x20}, 0x1, 0x0, 0x0, 0x20049811}, 0x20008004) 03:00:07 executing program 7: io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x7, 0x40, 0x8, 0x5, {{0xc, 0x4, 0x1, 0x1, 0x30, 0x65, 0x0, 0x9, 0x29, 0x0, @loopback, @loopback, {[@noop, @ssrr={0x89, 0x1b, 0x87, [@dev={0xac, 0x14, 0x14, 0x24}, @rand_addr=0x64010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000100)=[r3, r0, r0, r0], 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x200, 0xa862, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x24040004) r6 = socket(0x23, 0x6, 0x2) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8054}, 0x44810) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private0, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f0000000540)=0xe8) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf8, 0x13, 0x200, 0x70bd29, 0x25dfdbfc, {0x11, 0x8d, 0x40, 0x81, {0x4e22, 0x4e21, [0x2, 0x88, 0x4, 0x7], [0x4, 0x0, 0x2, 0x7], r8, [0x9, 0x101]}, 0x7eae662c, 0x70}, [@INET_DIAG_REQ_BYTECODE={0x4c, 0x1, "832e14cd9106cdc162bfc1b300ab10c156b74933aee60b339a4ccf4ed15d4728af4bbf7928a75d5c73a0999fe16c5399436a8f7c20d25aba27477e57cedfff0fbc0d05f7a27592a6"}, @INET_DIAG_REQ_BYTECODE={0x14, 0x1, "816bda1ccd341f45d6aba48695d08f30"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "e52cea5702a971fde5b9a5e6f69f779e544eadf4b64e5887b5b801919cdc224e42391d8082971735a7b6b55ab030f6e2ebc5cbf50d9638d383ff3b52998f26736dc7d4c8bd"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x41}, 0x0) r9 = socket(0x18, 0x1, 0x8) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r9) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000740)={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, {0xa, 0x4e20, 0xfffffffe, @private1={0xfc, 0x1, '\x00', 0x1}, 0x400}, 0x1f, [0x40, 0x2, 0x0, 0x2, 0x400, 0x1, 0x7f, 0x3]}, 0x5c) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000d80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d40)={&(0x7f0000000800)={0x520, r10, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="7bab689a6e4f"}, @NL80211_ATTR_IE={0x107, 0x2a, [@supported_rates={0x1, 0x3, [{0x36}, {0x18}, {0x36}]}, @tim={0x5, 0x20, {0x2, 0x87, 0x5, "baf5462461fa757a9ed9b35e8ac061dafbe35b0d2aa723e61236041455"}}, @random={0x1, 0x3d, "e2565bba1586c40777492c96325bdfb816cfce56460b6808067943e7d67d64181ca0cde06e80a19a7cdbd15180f3d44b7e30fdd7b1981b35d9be5f5020"}, @chsw_timing={0x68, 0x4, {0x9, 0x100}}, @fast_bss_trans={0x37, 0x84, {0x6, 0x4, "4a27ce9b8dec43908b8b2636e8457227", "b8e60f4933724ffc62fe4972875bdb7bfeae1cec8f7c95e158ef57efb5c3c60f", "01719a10c2b97baa51b6f6e4cb4bcb29b8a17dcd89a8e9643f12ae66aee6897a", [{0x3, 0x4, "1743b63c"}, {0x2, 0x1c, "32686a75d860e86d2d0c06622ff3750180fdf1232c49c24f6d3989a9"}, {0x2, 0x3, "8a97ae"}, {0x4, 0x7, "cfd0964a508b56"}]}}, @erp={0x2a, 0x1}, @tim={0x5, 0xc, {0x3, 0xd6, 0x7f, "25fcba68ff174e5d9d"}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb7}, @NL80211_ATTR_IE={0xcd, 0x2a, [@tim={0x5, 0xc7, {0x1, 0x8b, 0x7f, "606959a81676337cfd78b4261ab76d452dcfa49ff4c06fd1e1f4a1ee9f04c446eff496bbdd37fec76ed802982bae1751c5ae132c0152541ded8351d72fe38a707d83e7209b27589e81f09b8e66ba3bb4f338271c912b7f23bcd08d67dc1f2d4074527f2c28ef2a9a382544e4464aecdbc1cbbe244207c60712b7700d452ccd7f2e55880e42816ba928820abb5a64dc9d53e07b53a79630e0cbd3e7435012a27ca5ad8f8e6ff37577450405b153f877804a3e7a2d963ccd7c8d75d53554f63a397403a7ea"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x196, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x8, 0x12, 0x6a65}}, @prep={0x83, 0x25, @ext={{}, 0x3, 0x7, @broadcast, 0x2, @broadcast, 0x9, 0xc7, @device_b, 0xdc15}}, @perr={0x84, 0x63, {0x2, 0x7, [@not_ext={{}, @device_a, 0x5, "", 0x1d}, @not_ext={{}, @device_b, 0x7, "", 0x6}, @not_ext={{}, @device_a, 0x1, "", 0x4}, @not_ext={{}, @device_b, 0x5, "", 0x14}, @not_ext={{}, @device_b, 0x80000000, "", 0x23}, @ext={{}, @device_a, 0x6, @device_a, 0x39}, @not_ext={{}, @device_b, 0x2, "", 0x1e}]}}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0xffffffffffffffff, 0x5, 0x1, 0x52, 0x1}}, @measure_req={0x26, 0xd7, {0x40, 0xb1, 0x6, "eb1517489bf078dadea79641dc997ee9ce4f77151360b7929b3109a226690cb748805423508e01a920a44f854e8bfe1ff03fe3f4e10f6df555ced28c6dcde8b7066aff95981986b6dd09a0a33e906317acd371f36292647ee02d472f1e6d3f7dfc3c3909fae658aa307fbdc4b563d722d56a5ce7e627bed6770cb70d026c84eae6b9ddc45017dc5edd70857f044d71c6a3b20e159af975b2afe9d3a9fbfb548061c87478a69dff50d1a67a719636335bc1e89d3a399174ecccb3f0460997f5cb69cbbf944d85c5eecb3f42efa65e132e5e8fd83d"}}, @ht={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0xfffffffffffffffd, 0x8, 0x0, 0x71, 0x0, 0x1, 0x1, 0x2}, 0x300, 0x8, 0x9}}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='y'}, @NL80211_ATTR_IE={0x172, 0x2a, [@gcr_ga={0xbd, 0x6, @broadcast}, @preq={0x82, 0x4c, @ext={{0x0, 0x1}, 0x9, 0x1, 0xaf16, @broadcast, 0xf1, @device_a, 0x4, 0xc9a, 0x4, [{{0x1, 0x0, 0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0xe19}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}]}}, @tim={0x5, 0xf7, {0xa7, 0x26, 0x40, "0c243deff0c3dbc83da997537df30760fd666fb5dcd29e7058b3e9dc8b5b7b8f2fe848c229d2995f1a7330f6125aafc540add43adffdc572b5590d263ccede5d44922e0832d884b26aa83714959eafc9bc2e2ccfa15ba7f6f482f6373df424ef65ed9db447c0c31c86a3a1c584cdf94bc871898aadaeaf09fce52546614ea540b9d71f56a434b06f7f7b68fd0320abb54ed462c50b7616e15e1d9355ca9a4576f82934acbd83acd7926725bcd7b6bca5b98c9a7d575a60d36263d0b074c86bb3989e71890cdadac78d54774d4bd5c7b5909432f679fc1a247d216c04952572be9f6ea223d93fb52ce96503dc5dce1ce167f44dab"}}, @challenge={0x10, 0x1, 0x4b}, @ht={0x2d, 0x1a, {0x20, 0x3, 0x6, 0x0, {0x6, 0xa, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x100, 0x4}}]}]}, 0x520}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040810) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000e00)="8e285ae63a8b8e2d085eefaffa3a2379358b035f754900d9b22c88240553fe80042853499d4632510a8a62b2b65b14d3dff1085f554c01a166a067bf818b8ae5bf3cdf06", 0x44) [ 94.636226] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.643372] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.649367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.651455] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.653831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.656999] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.660043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.663828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.666059] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 94.669410] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.672534] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.679950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.682886] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.701419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.703486] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.711582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.718349] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.727937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.729638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.742644] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.745817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.769911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.774471] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.777827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.780909] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.782578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.792337] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.823659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.829484] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 94.832630] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.842859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 94.844344] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.856561] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 94.880380] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 94.892573] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 94.900490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 94.904497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 94.905900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 94.907747] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 94.911761] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 94.915474] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 94.923283] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 94.927272] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 94.928788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 94.936379] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 94.965673] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 94.973660] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 94.977347] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 96.738286] Bluetooth: hci2: command tx timeout [ 96.738921] Bluetooth: hci1: command tx timeout [ 96.801465] Bluetooth: hci3: command tx timeout [ 96.802024] Bluetooth: hci0: command tx timeout [ 96.930309] Bluetooth: hci4: command tx timeout [ 96.994294] Bluetooth: hci7: command tx timeout [ 96.995004] Bluetooth: hci5: command tx timeout [ 97.057781] Bluetooth: hci6: command tx timeout [ 98.786334] Bluetooth: hci2: command tx timeout [ 98.786814] Bluetooth: hci1: command tx timeout [ 98.850328] Bluetooth: hci0: command tx timeout [ 98.850766] Bluetooth: hci3: command tx timeout [ 98.978558] Bluetooth: hci4: command tx timeout [ 99.043028] Bluetooth: hci5: command tx timeout [ 99.043521] Bluetooth: hci7: command tx timeout [ 99.106279] Bluetooth: hci6: command tx timeout [ 100.833570] Bluetooth: hci1: command tx timeout [ 100.834942] Bluetooth: hci2: command tx timeout [ 100.897347] Bluetooth: hci3: command tx timeout [ 100.898262] Bluetooth: hci0: command tx timeout [ 101.025919] Bluetooth: hci4: command tx timeout [ 101.089513] Bluetooth: hci7: command tx timeout [ 101.090670] Bluetooth: hci5: command tx timeout [ 101.153705] Bluetooth: hci6: command tx timeout [ 102.882315] Bluetooth: hci2: command tx timeout [ 102.883037] Bluetooth: hci1: command tx timeout [ 102.946095] Bluetooth: hci3: command tx timeout [ 102.946947] Bluetooth: hci0: command tx timeout [ 103.075257] Bluetooth: hci4: command tx timeout [ 103.137320] Bluetooth: hci7: command tx timeout [ 103.137876] Bluetooth: hci5: command tx timeout [ 103.201301] Bluetooth: hci6: command tx timeout [ 154.312634] syz-executor.0 (280) used greatest stack depth: 24288 bytes left [ 156.675614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.679454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.681694] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.688453] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.692779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.696730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.797971] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.807826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.811802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.834018] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.838700] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.851376] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 156.928028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.933389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.937622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.943057] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.946458] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.951258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.958548] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.969476] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 156.973916] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.977496] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.987054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 156.988985] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.999803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.007841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.013602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.060973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.085756] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.093716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.188903] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 157.193875] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.198678] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.201578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.204144] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 157.206519] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 157.237883] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 157.237913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 157.240763] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 157.246478] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.251951] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 157.255555] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 157.258438] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 157.262394] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 157.262741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.269454] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 157.270156] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 157.271669] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.753382] Bluetooth: hci0: command tx timeout [ 158.945334] Bluetooth: hci1: command tx timeout [ 159.073621] Bluetooth: hci3: command tx timeout [ 159.202610] Bluetooth: hci4: command tx timeout [ 159.202661] Bluetooth: hci2: command tx timeout [ 159.329306] Bluetooth: hci7: command tx timeout [ 159.393324] Bluetooth: hci5: command tx timeout [ 159.394578] Bluetooth: hci6: command tx timeout [ 160.801247] Bluetooth: hci0: command tx timeout [ 160.994296] Bluetooth: hci1: command tx timeout [ 161.122245] Bluetooth: hci3: command tx timeout [ 161.249269] Bluetooth: hci2: command tx timeout [ 161.249320] Bluetooth: hci4: command tx timeout [ 161.377342] Bluetooth: hci7: command tx timeout [ 161.441516] Bluetooth: hci6: command tx timeout [ 161.442106] Bluetooth: hci5: command tx timeout [ 162.849330] Bluetooth: hci0: command tx timeout [ 163.041353] Bluetooth: hci1: command tx timeout [ 163.169473] Bluetooth: hci3: command tx timeout [ 163.297430] Bluetooth: hci4: command tx timeout [ 163.297671] Bluetooth: hci2: command tx timeout [ 163.425272] Bluetooth: hci7: command tx timeout [ 163.489392] Bluetooth: hci5: command tx timeout [ 163.489879] Bluetooth: hci6: command tx timeout [ 164.897320] Bluetooth: hci0: command tx timeout [ 165.090280] Bluetooth: hci1: command tx timeout [ 165.218267] Bluetooth: hci3: command tx timeout [ 165.345284] Bluetooth: hci4: command tx timeout [ 165.345321] Bluetooth: hci2: command tx timeout [ 165.474226] Bluetooth: hci7: command tx timeout [ 165.537254] Bluetooth: hci6: command tx timeout [ 165.538366] Bluetooth: hci5: command tx timeout [ 218.795585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 218.798603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 218.801657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 218.806116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 218.809378] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 218.810681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.055451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 219.058525] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 219.060627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 219.068020] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 219.072187] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 219.073471] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.122107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.124600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.126511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.135755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.148477] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.151634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.193640] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.202836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.206440] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 219.218391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 219.218939] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.236416] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.238061] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.239082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.246312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 219.270476] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.291480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 219.294883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 219.360103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 219.375520] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 219.377368] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 219.379207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 219.387570] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 219.390623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 219.408366] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 219.411287] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 219.412767] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 219.412855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 219.414846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 219.417618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 219.417701] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 219.422411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.423360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 219.428588] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 219.433619] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 219.435640] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 220.898913] Bluetooth: hci0: command tx timeout [ 221.153340] Bluetooth: hci1: command tx timeout [ 221.219271] Bluetooth: hci2: command tx timeout [ 221.281267] Bluetooth: hci4: command tx timeout [ 221.345290] Bluetooth: hci3: command tx timeout [ 221.537273] Bluetooth: hci5: command tx timeout [ 221.538112] Bluetooth: hci6: command tx timeout [ 221.539495] Bluetooth: hci7: command tx timeout [ 222.946088] Bluetooth: hci0: command tx timeout [ 223.201312] Bluetooth: hci1: command tx timeout [ 223.267226] Bluetooth: hci2: command tx timeout [ 223.329385] Bluetooth: hci4: command tx timeout [ 223.395249] Bluetooth: hci3: command tx timeout [ 223.587325] Bluetooth: hci7: command tx timeout [ 223.588532] Bluetooth: hci6: command tx timeout [ 223.588556] Bluetooth: hci5: command tx timeout [ 224.994216] Bluetooth: hci0: command tx timeout [ 225.251209] Bluetooth: hci1: command tx timeout [ 225.313624] Bluetooth: hci2: command tx timeout [ 225.378296] Bluetooth: hci4: command tx timeout [ 225.443470] Bluetooth: hci3: command tx timeout [ 225.633239] Bluetooth: hci5: command tx timeout [ 225.634266] Bluetooth: hci7: command tx timeout [ 225.634360] Bluetooth: hci6: command tx timeout [ 227.041249] Bluetooth: hci0: command tx timeout [ 227.297264] Bluetooth: hci1: command tx timeout [ 227.362194] Bluetooth: hci2: command tx timeout [ 227.425362] Bluetooth: hci4: command tx timeout [ 227.490213] Bluetooth: hci3: command tx timeout [ 227.681439] Bluetooth: hci7: command tx timeout [ 227.681482] Bluetooth: hci6: command tx timeout [ 227.681919] Bluetooth: hci5: command tx timeout [ 281.329117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.332789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.334685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.339565] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.342456] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.345599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.647501] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.656598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.662010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.669477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.672861] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.676257] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.730356] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.739770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.742254] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.743709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.746978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.756541] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.757490] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.760403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.763534] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.765611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.779650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.785582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.806293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.821707] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.825010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 281.837572] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.843757] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.846049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.847709] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.850593] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.852033] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.856093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.857589] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.860932] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.865751] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.870343] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.874241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.876261] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.881868] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.885487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.887605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.892064] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.895544] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.904321] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.923331] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.932353] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 283.425584] Bluetooth: hci0: command tx timeout [ 283.745278] Bluetooth: hci1: command tx timeout [ 283.875229] Bluetooth: hci2: command tx timeout [ 283.937371] Bluetooth: hci3: command tx timeout [ 284.001298] Bluetooth: hci5: command tx timeout [ 284.002019] Bluetooth: hci4: command tx timeout [ 284.065649] Bluetooth: hci7: command tx timeout [ 284.066427] Bluetooth: hci6: command tx timeout [ 285.473263] Bluetooth: hci0: command tx timeout [ 285.793676] Bluetooth: hci1: command tx timeout [ 285.921362] Bluetooth: hci2: command tx timeout [ 285.985682] Bluetooth: hci3: command tx timeout [ 286.049545] Bluetooth: hci5: command tx timeout [ 286.050590] Bluetooth: hci4: command tx timeout [ 286.113351] Bluetooth: hci6: command tx timeout [ 286.114393] Bluetooth: hci7: command tx timeout [ 287.521757] Bluetooth: hci0: command tx timeout [ 287.841377] Bluetooth: hci1: command tx timeout [ 287.969347] Bluetooth: hci2: command tx timeout [ 288.034229] Bluetooth: hci3: command tx timeout [ 288.097262] Bluetooth: hci4: command tx timeout [ 288.097998] Bluetooth: hci5: command tx timeout [ 288.162076] Bluetooth: hci6: command tx timeout [ 288.162875] Bluetooth: hci7: command tx timeout [ 289.569253] Bluetooth: hci0: command tx timeout [ 289.889395] Bluetooth: hci1: command tx timeout [ 290.017889] Bluetooth: hci2: command tx timeout [ 290.081287] Bluetooth: hci3: command tx timeout [ 290.145260] Bluetooth: hci5: command tx timeout [ 290.145749] Bluetooth: hci4: command tx timeout [ 290.209349] Bluetooth: hci7: command tx timeout [ 290.209837] Bluetooth: hci6: command tx timeout [ 344.045546] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 344.048044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 344.049938] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 344.054917] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 344.058814] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 344.060772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.175662] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 344.179306] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 344.181099] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 344.193210] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 344.197744] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 344.201549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 344.250014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.253168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.254881] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.258882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.263947] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 344.265781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.309530] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.313617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.322743] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.334192] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 344.347528] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 344.348726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 344.353787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.361365] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 344.363585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.367357] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.371657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.386906] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 344.397629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 344.401316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 344.422579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 344.424495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 344.435018] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 344.448161] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 344.459388] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 344.460294] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 344.462691] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 344.469978] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 344.495500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.497684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 344.500516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.515514] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.520569] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.578514] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.582807] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.593797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.081289] Bluetooth: hci0: command tx timeout [ 346.273286] Bluetooth: hci1: command tx timeout [ 346.337473] Bluetooth: hci2: command tx timeout [ 346.401569] Bluetooth: hci3: command tx timeout [ 346.530759] Bluetooth: hci4: command tx timeout [ 346.594215] Bluetooth: hci5: command tx timeout [ 346.595514] Bluetooth: hci6: command tx timeout [ 346.658159] Bluetooth: hci7: command tx timeout [ 348.130357] Bluetooth: hci0: command tx timeout [ 348.324170] Bluetooth: hci1: command tx timeout [ 348.386358] Bluetooth: hci2: command tx timeout [ 348.450416] Bluetooth: hci3: command tx timeout [ 348.577789] Bluetooth: hci4: command tx timeout [ 348.642198] Bluetooth: hci5: command tx timeout [ 348.642240] Bluetooth: hci6: command tx timeout [ 348.706240] Bluetooth: hci7: command tx timeout [ 350.179241] Bluetooth: hci0: command tx timeout [ 350.370201] Bluetooth: hci1: command tx timeout [ 350.434296] Bluetooth: hci2: command tx timeout [ 350.498325] Bluetooth: hci3: command tx timeout [ 350.625416] Bluetooth: hci4: command tx timeout [ 350.689955] Bluetooth: hci6: command tx timeout [ 350.690474] Bluetooth: hci5: command tx timeout [ 350.754175] Bluetooth: hci7: command tx timeout [ 352.225317] Bluetooth: hci0: command tx timeout [ 352.417386] Bluetooth: hci1: command tx timeout [ 352.481445] Bluetooth: hci2: command tx timeout [ 352.547271] Bluetooth: hci3: command tx timeout [ 352.673270] Bluetooth: hci4: command tx timeout [ 352.737242] Bluetooth: hci6: command tx timeout [ 352.738264] Bluetooth: hci5: command tx timeout [ 352.801370] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 03:05:11 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff8179c0bd RDX=fffffbfff0c7f993 RSI=0000000000000008 RDI=ffffffff863fcc90 RBP=ffff888008c4f780 RSP=ffff88802cbffc20 R8 =0000000000000000 R9 =fffffbfff0c7f992 R10=ffffffff863fcc97 R11=0000000000000000 R12=000000000003a70c R13=0000000000000200 R14=ffff88800e314000 R15=ffff88800e314000 RIP=ffffffff8179c0c5 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f59c167c540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f92345824a1 CR3=00000000269ce000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff84a100f1 RDX=ffff888024d05340 RSI=00007faae796ffff RDI=0000000000000006 RBP=ffff88802ea7f000 RSP=ffff88802e4979b0 R8 =0000000000000000 R9 =ffff888024d05d80 R10=fffffffffffffffe R11=0000000000000000 R12=000000000000000d R13=00007faae796ffff R14=dffffc0000000000 R15=ffff88802e497c78 RIP=ffffffff84a100f6 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9e7a7494a1 CR3=0000000034a70000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=25252525252525252525252525252525 XMM01=00000000000000000000ffffffffffff XMM02=00000000000000000000ffffffffffff XMM03=65006463682d69636865203a65727020 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000