syzkaller login: [   70.388690] scp (235) used greatest stack depth: 23712 bytes left
Warning: Permanently added '[localhost]:12238' (ECDSA) to the list of known hosts.
2025/01/06 13:13:41 fuzzer started
2025/01/06 13:13:42 dialing manager at localhost:34561
[   75.029931] cgroup: Unknown subsys name 'net'
[   75.132885] cgroup: Unknown subsys name 'cpuset'
[   75.165202] cgroup: Unknown subsys name 'rlimit'
2025/01/06 13:14:00 syscalls: 200
2025/01/06 13:14:00 code coverage: enabled
2025/01/06 13:14:00 comparison tracing: enabled
2025/01/06 13:14:00 extra coverage: enabled
2025/01/06 13:14:00 setuid sandbox: enabled
2025/01/06 13:14:00 namespace sandbox: enabled
2025/01/06 13:14:00 Android sandbox: enabled
2025/01/06 13:14:00 fault injection: enabled
2025/01/06 13:14:00 leak checking: enabled
2025/01/06 13:14:00 net packet injection: enabled
2025/01/06 13:14:00 net device setup: enabled
2025/01/06 13:14:00 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/06 13:14:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/06 13:14:00 USB emulation: enabled
2025/01/06 13:14:00 hci packet injection: enabled
2025/01/06 13:14:00 wifi device emulation: enabled
2025/01/06 13:14:00 802.15.4 emulation: enabled
2025/01/06 13:14:00 fetching corpus: 0, signal 0/0 (executing program)
2025/01/06 13:14:02 starting 8 fuzzer processes
13:14:02 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x800, 0x5, 0x9, {0x5, 0x9}, 0xce, 0x3f})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xc0002)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f00000000c0)={0x264, 0x80000000, 0x0, 'queue0\x00', 0x401})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x3, 0x6, 0x1, 'queue0\x00', 0x401})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000300)={{0x99, 0x9}, {0x1, 0x1}, 0x67, 0x0, 0xff})
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000380))
r1 = syz_open_dev$usbmon(&(0x7f00000003c0), 0x1, 0x20000)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x110, r1, 0xd3066000)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000400)={0x1, 0x6, 0x4, 0x7fff, 0x6, 0x3ff})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000440)={{0x8b, 0x7}, {0x3, 0x3f}, 0x2, 0x2, 0x8})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000004c0)={{0x1, 0xfc}, 'port1\x00', 0x20, 0x20000, 0xfffffffd, 0x8, 0xffffff01, 0x3, 0x1, 0x0, 0x0, 0x80})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000580)={0x0, 0x3, 0x1, 'queue0\x00', 0x80})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000640)={0x24, 0x1, 'client0\x00', 0x0, "47d57d8e1fdf720c", "fcb7ec6a0c76f8a24f837586cdb21e1cb79160470efd32fcf55f55ad064b4cd7", 0x6, 0x3e})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/40, 0x28}, {&(0x7f0000000840)=""/143, 0x8f}, {&(0x7f0000000900)=""/32, 0x20}, {&(0x7f0000000940)=""/224, 0xe0}, {&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000b00)=""/77, 0x4d}, {&(0x7f0000000b80)=""/119, 0x77}], 0x8, &(0x7f0000000c80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf0}}, {{&(0x7f0000000d80), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000e00)}, {&(0x7f0000000e40)=""/207, 0xcf}, {&(0x7f0000000f40)=""/8, 0x8}, {&(0x7f0000000f80)=""/34, 0x22}, {&(0x7f0000000fc0)=""/6, 0x6}], 0x5, &(0x7f0000001080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}}, {{&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002600)=[{&(0x7f0000001140)=""/96, 0x60}, {&(0x7f00000011c0)=""/244, 0xf4}, {&(0x7f00000012c0)=""/137, 0x89}, {&(0x7f0000001380)=""/63, 0x3f}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/107, 0x6b}, {&(0x7f0000002440)=""/152, 0x98}, {&(0x7f0000002500)=""/134, 0x86}, {&(0x7f00000025c0)=""/24, 0x18}], 0x9, &(0x7f00000026c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002a00)=[{&(0x7f0000002840)=""/19, 0x13}, {&(0x7f0000002880)=""/35, 0x23}, {&(0x7f00000028c0)=""/234, 0xea}, {&(0x7f00000029c0)=""/62, 0x3e}], 0x4, &(0x7f0000002a40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [<r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}, {{&(0x7f0000002bc0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002c40)=""/57, 0x39}, {&(0x7f0000002c80)=""/92, 0x5c}, {&(0x7f0000002d00)=""/155, 0x9b}, {&(0x7f0000002dc0)}, {&(0x7f0000002e00)=""/72, 0x48}], 0x5}}, {{&(0x7f0000002f00), 0x6e, &(0x7f00000040c0)=[{&(0x7f0000002f80)=""/161, 0xa1}, {&(0x7f0000003040)=""/4096, 0x1000}, {&(0x7f0000004040)=""/75, 0x4b}], 0x3, &(0x7f0000004100)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000041c0), 0x6e, &(0x7f0000004280)=[{&(0x7f0000004240)=""/46, 0x2e}], 0x1, &(0x7f00000042c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000004340)=@abs, 0x6e, &(0x7f00000046c0)=[{&(0x7f00000043c0)=""/45, 0x2d}, {&(0x7f0000004400)=""/163, 0xa3}, {&(0x7f00000044c0)=""/133, 0x85}, {&(0x7f0000004580)=""/53, 0x35}, {&(0x7f00000045c0)=""/209, 0xd1}], 0x5, &(0x7f0000004740)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x8, 0x16043, &(0x7f0000004a40))
ioctl$HIDIOCGFLAG(r2, 0x8004480e, &(0x7f0000004a80))
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000004ac0))
mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x80010, r5, 0x7)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000004b00)={0xee6, 0x2, 0xa137, 0xff, 0x1, 0x5})

13:14:02 executing program 1:
r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x1, {0x3}}, 0x3f)
r1 = syz_io_uring_setup(0x60cb, &(0x7f0000000040)={0x0, 0xac98, 0x20, 0x0, 0x230}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100))
r3 = mmap$IORING_OFF_SQES(&(0x7f0000fb1000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r1, 0x100000000, 0x0, 0x5, 0x0, 0x1}, 0x8000)
read$hiddev(0xffffffffffffffff, &(0x7f0000000180)=""/105, 0x69)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000200)={0x3f, 0x7, 0x7, {0x7, 0x7}, 0x1, 0x9})
r4 = syz_io_uring_setup(0xe73, &(0x7f0000000280)={0x0, 0xafb6, 0x20, 0x1, 0x2e2, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000e44000/0x3000)=nil, &(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
r7 = io_uring_setup(0x7640, &(0x7f00000007c0)={0x0, 0xd8d5, 0x0, 0x1, 0x295, 0x0, r4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r7, 0x7, &(0x7f0000000840)=r4, 0x1)
syz_io_uring_submit(r2, r6, &(0x7f0000000880)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, r1}, 0x50000000)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000cea000/0x4000)=nil, 0x4000, 0x9, 0x4010, r4, 0x10000000)
clock_gettime(0x0, &(0x7f00000008c0)={<r9=>0x0, <r10=>0x0})
syz_io_uring_submit(r5, r8, &(0x7f0000000940)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000900)={r9, r10+60000000}, 0x1, 0x1}, 0x40)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan3\x00', <r13=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xc000)
ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000001180)={0x5f, "24a73f64a647d35fbd6f8a4a1d910dc82c15060574a31fbc8ae2f4ea81103a2782bba9874859f6d5662f6101836ca9e26f5076cd2bfaeec3198d750c700937035e60cbfaae16fc6cdb9f6ec6643d0785c1c411e78a078c988cc62d57bc87f4"})

13:14:02 executing program 3:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000040)={0x64, 0x81, 0x0, 'queue0\x00', 0x101})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0x1, 0x6, 0x0, 'queue0\x00', 0xfffffff8})
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1}, 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000003c0)={0xff, 0x9, 0xffff, 0x7, 0x1, 0x20})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'})
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
syz_io_uring_setup(0x575, &(0x7f0000000480)={0x0, 0x9301, 0x28, 0x1, 0x3b, 0x0, r1}, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000c26000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000640)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r1, &(0x7f0000000580)=0x80, &(0x7f00000005c0)=@can={0x1d, <r3=>0x0}, 0x0, 0x80000, 0x1}, 0x7)
recvmsg$unix(r1, &(0x7f0000000dc0)={&(0x7f0000000680), 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/14, 0xe}, {&(0x7f00000007c0)=""/22, 0x16}, {&(0x7f0000000800)=""/79, 0x4f}, {&(0x7f0000000880)=""/96, 0x60}, {&(0x7f0000000900)=""/252, 0xfc}, {&(0x7f0000000a00)=""/139, 0x8b}, {&(0x7f0000000ac0)=""/168, 0xa8}, {&(0x7f0000000b80)=""/68, 0x44}, {&(0x7f0000000c00)=""/17, 0x11}], 0xa, &(0x7f0000000d00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}, 0x20140)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x28, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002640), r5)
sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000002740)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002700)={&(0x7f0000002680)={0x60, r7, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="9a7aaff66742"}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008881}, 0x40)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002780), 0x604040, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000002800)={'batadv_slave_0\x00', <r9=>0x0})
getpeername$packet(r4, &(0x7f0000002840)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002880)=0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000028c0)={'batadv0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r8, &(0x7f00000029c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x78, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x20044801)

13:14:02 executing program 2:
ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x7236)
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000000)={0x1, 0xffffffff, 0x1})
ioctl$HIDIOCSFLAG(0xffffffffffffffff, 0x4004480f, &(0x7f0000000040)=0x3)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000080)={0x80000001, 0x4, 0x52, {0x80000001, 0x7}, 0x75, 0x1eef8bc2})
ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, &(0x7f0000000100)={0x2, 0xffffffff})
ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000140)={0x1, 0x200, 0x3})
pipe2(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x4, 0x0, 'client1\x00', 0xffffffff80000003, "d1e69e26f5cb5a4c", "65ebc7bc5ce37296c1118860260d612a97cd36a71b593a3fa05c54e0eb749701", 0x7fff, 0x20})
read$hiddev(r1, &(0x7f0000000280)=""/17, 0x11)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003fc0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)=""/138, 0x8a}], 0x1, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000000740)=[{&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/94, 0x5e}, {&(0x7f00000006c0)=""/128, 0x80}], 0x3, &(0x7f0000000780)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000840)=""/158, 0x9e}], 0x1, &(0x7f0000000940)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x128}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)=""/249, 0xf9}, {&(0x7f0000000b80)=""/38, 0x26}, {&(0x7f0000000bc0)=""/254, 0xfe}, {&(0x7f0000000cc0)=""/114, 0x72}], 0x4, &(0x7f0000000d80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x178}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000022c0)=[{&(0x7f0000000f80)=""/239, 0xef}, {&(0x7f0000001080)=""/57, 0x39}, {&(0x7f00000010c0)=""/250, 0xfa}, {&(0x7f00000011c0)=""/226, 0xe2}, {&(0x7f00000012c0)=""/4096, 0x1000}], 0x5, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f00000023c0)=""/224, 0xe0}, {&(0x7f00000024c0)=""/235, 0xeb}, {&(0x7f00000025c0)=""/108, 0x6c}, {&(0x7f0000002640)=""/56, 0x38}], 0x4, &(0x7f00000026c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000002740)}, {&(0x7f0000002780)=""/28, 0x1c}, {&(0x7f00000027c0)=""/143, 0x8f}, {&(0x7f0000002880)=""/71, 0x47}], 0x4, &(0x7f0000002940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000002a00)=""/211, 0xd3}, {&(0x7f0000002b00)=""/42, 0x2a}, {&(0x7f0000002b40)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/104, 0x68}, {&(0x7f0000003bc0)=""/161, 0xa1}, {&(0x7f0000003c80)=""/70, 0x46}, {&(0x7f0000003d00)=""/92, 0x5c}, {&(0x7f0000003d80)=""/94, 0x5e}], 0x8, &(0x7f0000003e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x8, 0x40, &(0x7f00000041c0)={0x77359400})
write$tun(r3, &(0x7f0000004200)={@val={0x0, 0x88e5}, @void, @ipv6=@udp={0xe, 0x6, "600283", 0x161, 0x11, 0xff, @loopback, @private1, {[@routing={0x1, 0xc, 0x2, 0x7f, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast2}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @loopback]}], {0x4e20, 0x4e20, 0xf9, 0x0, @opaque="a0303a8eb054b0a1db214e2a28eb3fa81be28710660e7676537e8b61356f46ede880f66d71ae73de052330155ad807851ddf78985fae1d2ab7cc83e756db4fdbd66d645d557ec38e0775bd704e3aaf5cc5ab18ea65e841b5ee36a6cab4759f9c1a7dc9396d4185cc29cec482aff2c7663cbf148c9a191cfa96d760ed9909e56fc7abedfb9a62c41427216bcea4f35264672b10adafdc88c644227e75d643b61f367ac390dc6e78d5ec2262c886105e4efea58bc99f2ba99a0e5d6370cc7b581e0badc1f0a071cee80fa5847bfc7509e17f42e7e65b76e7f9a847562752760058f6f176f2d82bb0390aee9776b20695e33a"}}}}, 0x18d)
r10 = syz_open_dev$hiddev(&(0x7f00000043c0), 0x3, 0x40000)
ioctl$HIDIOCGFLAG(r10, 0x8004480e, &(0x7f0000004400))
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000044c0)={<r11=>0x0}, &(0x7f0000004500)=0xc)
perf_event_open(&(0x7f0000004440)={0x4, 0x80, 0x7, 0x2f, 0x40, 0x93, 0x0, 0x6, 0x801, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xe170, 0x20}, 0x10084, 0x4, 0x50, 0x7, 0x101, 0x4b, 0x101, 0x0, 0x12b, 0x0, 0x3}, r11, 0xf, r4, 0xb)
getpeername$packet(r9, &(0x7f0000004540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000004580)=0x14)
ioctl$HIDIOCGVERSION(r7, 0x80044801, &(0x7f00000045c0))
getpeername$packet(r8, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004640)=0x14)
ioctl$HIDIOCGSTRING(r2, 0x81044804, &(0x7f0000004680)={0x40, "085902b68df35161a7e8cf809ec6d35c4175385f4478bc43271c21bd7de906efa62086beb5abc4fecf5ce998259833dd836a62689a5c8395d01d4b5990882ad9"})
write$tun(r5, &(0x7f0000004700)={@val={0x0, 0x7}, @val={0x2, 0x3, 0x7, 0x100, 0x1, 0x3f}, @ipv6=@generic={0x0, 0x6, "815f2d", 0x39a, 0x73, 0x1, @local, @dev={0xfe, 0x80, '\x00', 0x21}, {[@routing={0x4, 0x10, 0x0, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1c}, @private1, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback]}, @routing={0x3c, 0xe, 0x2, 0xa0, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x2b, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x46}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}]}, @routing={0x3c, 0xa, 0x0, 0x0, 0x0, [@loopback, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x3a, 0x1, '\x00', [@ra={0x5, 0x2, 0x8}, @pad1, @pad1]}, @hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @private0}]}, @fragment={0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x64}, @dstopts={0x2b, 0x1c, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2f}}, @generic={0x3, 0x66, "b7f99f59b11ee87eb3f8ce28a3deaa9cf6c1949d094761d06dcbad971e2c96370458e4997c45b7d56fe67c99b3d1501713bdf66c49f37a27c76c02b8bc9a2b578e0212ffdf0cf7ac9b6b8f3e2b01001d32e133ad31a19d4586b2b228d0f0f551aaa6249d3bda"}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x38, {0x2, 0xc, 0x20, 0x2, [0x1, 0xfff, 0x100, 0x8, 0x3, 0x0]}}, @pad1]}], "e0e4f17f0273603c1733c094216e59bc71a9e72b93a311810afdaf7971b79688fe868b69dca082a1c85d03d2b576e3ff0825804a1a82719fc7d12fd188c2861b11e6a39df8158f3ea2e3338fdf38aaa8ced2241edf8e8a2e81b04e0f060ad0cce06226f9ca8b9f755e7d406fc8e4634a008e07d27070b1ecf01a3c080cb26829742f90d96539917029523a15260d4c6c3a9f8bc4106ba8f41056dfdccc5bfafb868de42ca589efb39efb362faafb5225c2e614c5c85cf7d3b870314d0787263f35fb29fbb7c4e56e4107e5d02d2396d5b98204fe7fc33b4623f2883257cd4eaca5891743eb901d446329633d3d456b0983cb"}}}, 0x3d0)

13:14:02 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0xa0c81, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000008c0)={0x3, 0x0, 'client0\x00', 0x4, "b84dadcaf8f41d39", "78a16bfc3ca95ac44cd5e7cd27e164bafe4ff6301abc3282b8f70e9302cdd770", 0xd1})
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x6c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c8d0}, 0x0)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000b40), r0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r2, 0x8, 0x70bd2c, 0x81, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22008881}, 0xc000)
r3 = socket(0x1e, 0x6, 0xff)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000cc0), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x21400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0x8000)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff)
recvmmsg$unix(r3, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000e40)=""/184, 0xb8}, {&(0x7f0000000f00)=""/98, 0x62}, {&(0x7f0000000f80)=""/137, 0x89}, {&(0x7f0000001040)=""/217, 0xd9}, {&(0x7f0000001140)=""/131, 0x83}, {&(0x7f0000001200)=""/76, 0x4c}, {&(0x7f0000001280)=""/164, 0xa4}], 0x7, &(0x7f00000013c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [<r7=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r8=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000001440), 0x6e, &(0x7f0000001500)=[{&(0x7f00000014c0)=""/33, 0x21}], 0x1, &(0x7f0000001540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000001800)=[{&(0x7f0000001680)=""/217, 0xd9}, {&(0x7f0000001780)=""/91, 0x5b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/120, 0x78}, {&(0x7f00000018c0)=""/63, 0x3f}, {&(0x7f0000001900)=""/206, 0xce}, {&(0x7f0000001a00)=""/174, 0xae}, {&(0x7f0000001ac0)=""/97, 0x61}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/222, 0xde}], 0x7, &(0x7f0000002cc0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r11=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}], 0x4, 0x12020, &(0x7f0000002e40)={0x77359400})
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r9)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002e80), 0x10002)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000002fc0)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f00)={0x64, r12, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x1)
ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000003000))
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}]}, 0x1c}}, 0x4000000)
r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000003180), r7)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, r13, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}]}, 0x1c}}, 0x8000)
mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r11, 0xe4e)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000003400)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000033c0)={&(0x7f00000032c0)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x90e4}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

[   94.580928] audit: type=1400 audit(1736169242.620:7): avc:  denied  { execmem } for  pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
13:14:02 executing program 7:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r0=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000054}, 0x2000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x48800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x24040001)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xc8, r5, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffff9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9000}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xc8}, 0x1, 0x0, 0x0, 0xc0891}, 0x50)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x202, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x2, 0x70bd28, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4008000)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x80}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x64, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffff96}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x415118d2131b62f4)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r9, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x6c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xb2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x14}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000810)

13:14:02 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x20000000)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}}, 0x40801)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x48080}, 0x60000084)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x90}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x20}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r3)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "628252d4ef0f0dc5a322b79bb5f6d49f8b8be99f3f72151cebc267b58e5078e1"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xc4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3ff}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6ed31ef28112df5ea347ace8b8ad3c1e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "c7dd33f0e3df3bc8e4727645660a16326faf3b1673d43130a11a5f127fadb105"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "47e3a5006eed86f56d4a124151ab8ac2"}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x84, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "50d0b6845e0a4fe46757b35517ac1364"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "631d0c469eb6c3edefb75c86b37e02c22b9080f029969c25302bd49291b7f28f"}, @NL802154_KEY_ATTR_ID={0x38, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4995}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x1c4}}, 0x40044)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000009c0)={'wpan4\x00'})
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x28, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x800)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x24, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x40}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000055)

13:14:02 executing program 6:
mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x10, 0xffffffffffffffff, 0x10000000)
mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0xc1498000)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x80010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x1}, 0x7)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x400000)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0xd, 0x3}, {0x9, 0x1f}, 0x3, 0x6, 0x8a})
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xf99}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x80040)
r4 = socket$unix(0x1, 0x2, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1520}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044880}, 0x20040800)
shmget$private(0x0, 0x7000, 0x40, &(0x7f0000ff8000/0x7000)=nil)
r5 = syz_open_dev$hiddev(&(0x7f0000000380), 0x0, 0x400000)
ioctl$HIDIOCGFIELDINFO(r5, 0xc038480a, &(0x7f00000003c0)={0x3, 0x1, 0x7fff, 0x8000, 0x101, 0x1, 0x5, 0x537f7c42, 0x1000, 0x80000000, 0x7, 0xffffffff, 0xfffffffe, 0xffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0xb890de3e910056ff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x4afb, &(0x7f0000000480)={0x0, 0xe02e, 0x4, 0x1, 0x292, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000500)=<r6=>0x0, &(0x7f0000000540))
syz_io_uring_submit(r6, r1, &(0x7f0000000b00)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000ac0)='./file0\x00', 0x20, 0x4100, 0x12345}, 0x7fffffff)

[   95.890482] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.899165] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.900374] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.901829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.903263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.905383] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.915326] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.917092] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   95.918337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.923315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.929767] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   95.938174] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.066881] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.069845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.076316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.081841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.083242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.106365] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.108311] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.159212] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.182510] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.197915] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   96.223584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.223975] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.224870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   96.227183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.228990] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   96.246225] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   96.247575] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   96.250461] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.252124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   96.259710] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   96.274081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   96.275926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.277147] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   96.279973] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   96.281891] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   96.299526] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   96.300405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   96.303880] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   96.313263] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   96.316865] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   96.334475] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   96.345869] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   96.354998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   96.355577] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   96.359068] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   96.365595] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   97.975342] Bluetooth: hci0: command tx timeout
[   98.037771] Bluetooth: hci1: command tx timeout
[   98.357780] Bluetooth: hci4: command tx timeout
[   98.358523] Bluetooth: hci2: command tx timeout
[   98.359206] Bluetooth: hci3: command tx timeout
[   98.421807] Bluetooth: hci6: command tx timeout
[   98.421874] Bluetooth: hci5: command tx timeout
[   98.550921] Bluetooth: hci7: command tx timeout
[  100.024688] Bluetooth: hci0: command tx timeout
[  100.094683] Bluetooth: hci1: command tx timeout
[  100.405778] Bluetooth: hci3: command tx timeout
[  100.406052] Bluetooth: hci2: command tx timeout
[  100.406341] Bluetooth: hci4: command tx timeout
[  100.469832] Bluetooth: hci5: command tx timeout
[  100.471606] Bluetooth: hci6: command tx timeout
[  100.597728] Bluetooth: hci7: command tx timeout
[  102.069763] Bluetooth: hci0: command tx timeout
[  102.133719] Bluetooth: hci1: command tx timeout
[  102.453762] Bluetooth: hci2: command tx timeout
[  102.453911] Bluetooth: hci4: command tx timeout
[  102.454331] Bluetooth: hci3: command tx timeout
[  102.519602] Bluetooth: hci6: command tx timeout
[  102.519653] Bluetooth: hci5: command tx timeout
[  102.645838] Bluetooth: hci7: command tx timeout
[  104.119988] Bluetooth: hci0: command tx timeout
[  104.182237] Bluetooth: hci1: command tx timeout
[  104.501856] Bluetooth: hci4: command tx timeout
[  104.502418] Bluetooth: hci3: command tx timeout
[  104.503051] Bluetooth: hci2: command tx timeout
[  104.566719] Bluetooth: hci6: command tx timeout
[  104.567266] Bluetooth: hci5: command tx timeout
[  104.695508] Bluetooth: hci7: command tx timeout
[  158.470194] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.471936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.473284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.476298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.478790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.480832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.616430] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.621040] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.628088] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.632446] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.641804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.644092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.932233] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.936182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.937322] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  158.941790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.957302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  158.959773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.961912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  158.963383] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.964510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.980999] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.015504] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.020979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.021026] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  159.022507] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  159.027904] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  159.034929] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.035011] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  159.039171] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  159.043090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  159.045978] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  159.070179] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.102374] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  159.103353] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  159.104250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.130260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  159.139227] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.145899] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  159.151432] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  159.152763] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  159.159947] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.188325] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  159.222119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  159.224164] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  159.262051] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  159.275927] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  159.288032] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  160.515732] Bluetooth: hci0: command tx timeout
[  160.696737] Bluetooth: hci1: command tx timeout
[  161.077738] Bluetooth: hci2: command tx timeout
[  161.205863] Bluetooth: hci5: command tx timeout
[  161.205872] Bluetooth: hci4: command tx timeout
[  161.270047] Bluetooth: hci3: command tx timeout
[  161.271090] Bluetooth: hci6: command tx timeout
[  161.525745] Bluetooth: hci7: command tx timeout
[  162.549978] Bluetooth: hci0: command tx timeout
[  162.741927] Bluetooth: hci1: command tx timeout
[  163.126680] Bluetooth: hci2: command tx timeout
[  163.253846] Bluetooth: hci4: command tx timeout
[  163.255661] Bluetooth: hci5: command tx timeout
[  163.325686] Bluetooth: hci3: command tx timeout
[  163.325724] Bluetooth: hci6: command tx timeout
[  163.576727] Bluetooth: hci7: command tx timeout
[  164.598343] Bluetooth: hci0: command tx timeout
[  164.790582] Bluetooth: hci1: command tx timeout
[  165.173717] Bluetooth: hci2: command tx timeout
[  165.301934] Bluetooth: hci5: command tx timeout
[  165.302735] Bluetooth: hci4: command tx timeout
[  165.365855] Bluetooth: hci6: command tx timeout
[  165.367280] Bluetooth: hci3: command tx timeout
[  165.621785] Bluetooth: hci7: command tx timeout
[  166.647669] Bluetooth: hci0: command tx timeout
[  166.837741] Bluetooth: hci1: command tx timeout
[  167.229333] Bluetooth: hci2: command tx timeout
[  167.351005] Bluetooth: hci5: command tx timeout
[  167.351532] Bluetooth: hci4: command tx timeout
[  167.429182] Bluetooth: hci3: command tx timeout
[  167.429778] Bluetooth: hci6: command tx timeout
[  167.670722] Bluetooth: hci7: command tx timeout
[  221.060339] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.064251] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.065402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.068248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.071397] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.073796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.118174] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.119701] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.121033] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.123323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.127234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.128491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.312146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.313753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.321262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.327850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.332263] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  221.333320] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.382438] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.394021] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.397278] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.431579] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.440313] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.440881] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.442507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.462152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.481487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.483532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.487025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.504185] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.509187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.512157] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.514885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.516240] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  221.517304] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.518166] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.520171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.521227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.522051] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.530074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.535402] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  221.537025] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.627230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.630886] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.633334] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.636071] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.640055] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  221.641902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  223.158914] Bluetooth: hci1: command tx timeout
[  223.160041] Bluetooth: hci0: command tx timeout
[  223.350724] Bluetooth: hci2: command tx timeout
[  223.542733] Bluetooth: hci3: command tx timeout
[  223.606699] Bluetooth: hci5: command tx timeout
[  223.607530] Bluetooth: hci4: command tx timeout
[  223.670747] Bluetooth: hci6: command tx timeout
[  223.734823] Bluetooth: hci7: command tx timeout
[  225.205770] Bluetooth: hci1: command tx timeout
[  225.206306] Bluetooth: hci0: command tx timeout
[  225.398699] Bluetooth: hci2: command tx timeout
[  225.591479] Bluetooth: hci3: command tx timeout
[  225.653774] Bluetooth: hci4: command tx timeout
[  225.654281] Bluetooth: hci5: command tx timeout
[  225.718828] Bluetooth: hci6: command tx timeout
[  225.783896] Bluetooth: hci7: command tx timeout
[  227.254732] Bluetooth: hci1: command tx timeout
[  227.256401] Bluetooth: hci0: command tx timeout
[  227.446787] Bluetooth: hci2: command tx timeout
[  227.638756] Bluetooth: hci3: command tx timeout
[  227.702941] Bluetooth: hci4: command tx timeout
[  227.704489] Bluetooth: hci5: command tx timeout
[  227.767721] Bluetooth: hci6: command tx timeout
[  227.830072] Bluetooth: hci7: command tx timeout
[  229.302797] Bluetooth: hci0: command tx timeout
[  229.304365] Bluetooth: hci1: command tx timeout
[  229.493720] Bluetooth: hci2: command tx timeout
[  229.685923] Bluetooth: hci3: command tx timeout
[  229.751508] Bluetooth: hci4: command tx timeout
[  229.753186] Bluetooth: hci5: command tx timeout
[  229.815169] Bluetooth: hci6: command tx timeout
[  229.878677] Bluetooth: hci7: command tx timeout
[  283.569928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.571482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.572766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.577365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.579082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  283.580142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.648171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.653201] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.655790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.662402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.663541] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  283.670177] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.671023] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  283.672565] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  283.681359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  283.682939] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.684162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  283.688762] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  283.802361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  283.835569] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  283.857219] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  283.880232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  283.882337] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  283.883950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  283.900146] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  283.903551] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  283.905340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  283.935905] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  283.948694] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  283.952931] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  284.002868] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  284.005661] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  284.016847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  284.018045] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  284.030748] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  284.036996] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  284.062112] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  284.063374] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  284.064313] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  284.078247] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  284.083431] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  284.084561] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  284.125914] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  284.150006] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  284.166915] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  284.187013] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  284.209722] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  284.218011] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  285.621701] Bluetooth: hci0: command tx timeout
[  285.749875] Bluetooth: hci2: command tx timeout
[  285.750140] Bluetooth: hci1: command tx timeout
[  285.941811] Bluetooth: hci4: command tx timeout
[  286.005835] Bluetooth: hci3: command tx timeout
[  286.197765] Bluetooth: hci5: command tx timeout
[  286.261849] Bluetooth: hci7: command tx timeout
[  286.263008] Bluetooth: hci6: command tx timeout
[  287.675701] Bluetooth: hci0: command tx timeout
[  287.811676] Bluetooth: hci1: command tx timeout
[  287.811726] Bluetooth: hci2: command tx timeout
[  287.990744] Bluetooth: hci4: command tx timeout
[  288.058624] Bluetooth: hci3: command tx timeout
[  288.245741] Bluetooth: hci5: command tx timeout
[  288.309700] Bluetooth: hci6: command tx timeout
[  288.311666] Bluetooth: hci7: command tx timeout
[  289.717760] Bluetooth: hci0: command tx timeout
[  289.846648] Bluetooth: hci2: command tx timeout
[  289.846737] Bluetooth: hci1: command tx timeout
[  290.038680] Bluetooth: hci4: command tx timeout
[  290.101809] Bluetooth: hci3: command tx timeout
[  290.297899] Bluetooth: hci5: command tx timeout
[  290.358897] Bluetooth: hci7: command tx timeout
[  290.359390] Bluetooth: hci6: command tx timeout
[  291.776765] Bluetooth: hci0: command tx timeout
[  291.896634] Bluetooth: hci2: command tx timeout
[  291.933216] Bluetooth: hci1: command tx timeout
[  292.092739] Bluetooth: hci4: command tx timeout
[  292.154961] Bluetooth: hci3: command tx timeout
[  292.345722] Bluetooth: hci5: command tx timeout
[  292.406273] Bluetooth: hci7: command tx timeout
[  292.407842] Bluetooth: hci6: command tx timeout
[  345.987412] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  345.989152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  345.991718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  345.997862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  346.002044] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  346.006423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  346.115449] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.118880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.121869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.127217] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.134789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  346.136383] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.248912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.251923] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.257540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.272866] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.278923] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  346.281166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.401360] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.407377] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.412220] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.416821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.422744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.427986] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.429982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.437557] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.438684] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  346.444369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.445911] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.446984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.451905] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.454048] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.456705] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  346.458440] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.467879] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.486088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.542483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  346.548395] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  346.556984] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  346.557086] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  346.562520] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  346.562601] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  346.567916] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  346.569755] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  346.571335] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  346.573282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  346.574789] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  346.576929] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  348.038663] Bluetooth: hci0: command tx timeout
[  348.150682] Bluetooth: hci1: command tx timeout
[  348.341816] Bluetooth: hci2: command tx timeout
[  348.533767] Bluetooth: hci4: command tx timeout
[  348.533806] Bluetooth: hci3: command tx timeout
[  348.535029] Bluetooth: hci5: command tx timeout
[  348.661715] Bluetooth: hci7: command tx timeout
[  348.661773] Bluetooth: hci6: command tx timeout
[  350.069687] Bluetooth: hci0: command tx timeout
[  350.198808] Bluetooth: hci1: command tx timeout
[  350.389671] Bluetooth: hci2: command tx timeout
[  350.581759] Bluetooth: hci5: command tx timeout
[  350.581802] Bluetooth: hci3: command tx timeout
[  350.582297] Bluetooth: hci4: command tx timeout
[  350.709697] Bluetooth: hci7: command tx timeout
[  350.710238] Bluetooth: hci6: command tx timeout
[  352.117664] Bluetooth: hci0: command tx timeout
[  352.252647] Bluetooth: hci1: command tx timeout
[  352.438700] Bluetooth: hci2: command tx timeout
[  352.632639] Bluetooth: hci4: command tx timeout
[  352.633231] Bluetooth: hci3: command tx timeout
[  352.633797] Bluetooth: hci5: command tx timeout
[  352.757710] Bluetooth: hci6: command tx timeout
[  352.758244] Bluetooth: hci7: command tx timeout
[  354.165684] Bluetooth: hci0: command tx timeout
[  354.293752] Bluetooth: hci1: command tx timeout
[  354.485865] Bluetooth: hci2: command tx timeout
[  354.677706] Bluetooth: hci5: command tx timeout
[  354.678244] Bluetooth: hci3: command tx timeout
[  354.678764] Bluetooth: hci4: command tx timeout
[  354.805821] Bluetooth: hci7: command tx timeout
[  354.806373] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
13:19:11  Registers:
info registers vcpu 0
RAX=dffffc0000000000 RBX=b4041983340a5912 RCX=ffffffff814ffca3 RDX=1ffff110012b74d0
RSI=0000000000000008 RDI=0000000000000003 RBP=ffff8880095b9bc0 RSP=ffff8880095cf948
R8 =0000000000000000 R9 =fffffbfff0fdfbf0 R10=ffffffff87efdf87 R11=0000000000000000
R12=0000000000000001 R13=ffff8880095ba6a2 R14=0000000000000000 R15=ffff8880095ba680
RIP=ffffffff814ff8a2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055fe13b5e080 CR3=0000000033812000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000
XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff85c16b80 RDI=ffff88802c4dc1c8 RBP=ffffffff85c16b80 RSP=ffff88806cf09d30
R8 =00000000ffffffff R9 =fffffbfff1053a8d R10=0000000000043d38 R11=0000000000000000
R12=ffff88802c4db780 R13=ffff88802c4dc1c8 R14=00000000ffffffff R15=ffff88802c4dc1c8
RIP=ffffffff84a81f75 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe5700000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f05589be1f0 CR3=00000000309d2000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000