Warning: Permanently added '[localhost]:49208' (ECDSA) to the list of known hosts. 2025/01/14 19:07:15 fuzzer started 2025/01/14 19:07:15 dialing manager at localhost:33219 syzkaller login: [ 62.873588] cgroup: Unknown subsys name 'net' [ 62.962164] cgroup: Unknown subsys name 'cpuset' [ 62.992657] cgroup: Unknown subsys name 'rlimit' [ 68.149739] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/14 19:07:34 syscalls: 205 2025/01/14 19:07:34 code coverage: enabled 2025/01/14 19:07:34 comparison tracing: enabled 2025/01/14 19:07:34 extra coverage: enabled 2025/01/14 19:07:34 setuid sandbox: enabled 2025/01/14 19:07:34 namespace sandbox: enabled 2025/01/14 19:07:34 Android sandbox: enabled 2025/01/14 19:07:34 fault injection: enabled 2025/01/14 19:07:34 leak checking: enabled 2025/01/14 19:07:34 net packet injection: enabled 2025/01/14 19:07:34 net device setup: enabled 2025/01/14 19:07:34 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/14 19:07:34 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/14 19:07:34 USB emulation: enabled 2025/01/14 19:07:34 hci packet injection: enabled 2025/01/14 19:07:34 wifi device emulation: enabled 2025/01/14 19:07:34 802.15.4 emulation: enabled 2025/01/14 19:07:34 fetching corpus: 0, signal 0/0 (executing program) 2025/01/14 19:07:36 starting 8 fuzzer processes 19:07:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "5b0487f532f92c0f05a292e7752c2965"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r5, 0x420, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x64}}, 0x80) timer_create(0x5, &(0x7f0000000880)={0x0, 0x28, 0x2, @thr={&(0x7f0000000700)="069cff2e9d1372fde6d26b2d85ef3df4163bdf4b64d697ec776cc23e7d3fdb5f6784c0a7b392890c88baaf48ea5a957a780c18762165f98098d2fe325715260ea077f88eaf87f1793f5c4405", &(0x7f0000000780)="f8a5b391c02efb80f81751c0334281cf6baf918448e56ae4d34e6bbced67ca15038414c3e8f7c93cb99760c5d0e3e42ddf240487d5e5e18bf57cd4deadc81d3d0a5098c383a357a04ca9d9b8b6c983ff314177208ef263d0f80f70e5e7b8cf62a9c2f3ea389255a6fad73e0ff78762af991240fd2486c0d86d9783673efba6e9da9523c15b42659d82108ac188f183ce368fe6a0ffb9ebf2e719e775f91f407dfaad99a3c3db4a4d61c79b56c286b0be3da509f6885842662a8b5fe7150e94d76958ab8a"}}, &(0x7f00000008c0)) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x11) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x424, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc004000}, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x5250c0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, r9, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x72}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008814) 19:07:36 executing program 2: ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = socket(0x18, 0x6, 0x6) r1 = socket(0x25, 0x80000, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x1) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) sendto$packet(r0, &(0x7f00000000c0)="3a570a8fa4e33d0c106c7749b26e1de82005699a9a34526992dc238ac6caabcd205f0975325bf66b63cf734c2c989efd1b92bbcee1d3a10d3ce45e7f52ec5285ee21898869e6b42c13197a1e458e5cd98b40536e6f07764f2149952c784b414a17a58a5a7b22715ce6aa83cff40499049d0c315a3c01d766c9d626b0fbb23a1122d555a690d53b5ab7b19f2b284399d59c94bde6a7058b735d48313fe61a4f290d8e9c5f28637ca736d9fbe2fe0e55253018c5f8adceed0f3ea3108ce08973945778", 0xc2, 0x40000, &(0x7f0000000240)={0x11, 0x11, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8054001) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) ioctl$SNAPSHOT_S2RAM(0xffffffffffffffff, 0x330b) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x38}}, 0x48001) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fff}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x4020001) accept4$packet(r1, 0x0, &(0x7f0000000680), 0x40800) 19:07:36 executing program 3: ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) prctl$PR_SET_TIMERSLACK(0x1d, 0x7f) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/174, 0xae) ioctl$SNAPSHOT_UNFREEZE(0xffffffffffffffff, 0x3302) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffa, 0x1) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x803, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x84000) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000180)) r2 = add_key(&(0x7f00000001c0)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="047b3cb9e4df540a7d32c3bedc32bc563d24293ef1e34c297afe7988840dcbff0e9e2d329c4408938fe30064a66570ebee5154b0eaa45a362025d4ef2fd7a0205deacef06fe4a47c13cc8aa73463fee3ec5f2f78786d15d3c97a0ac304cb4d55343663af3ca85d1b6507ec06a3b6e1cd9d8e179476b6f2823039d6bd9692033da2423fe560c787697163cc907072ae2919100d8d744a6cdd735c6df0e3b23db9606461299bdbb081dfb37b502c7d103ea6e2940ffb766887738a660565d8baecb633f30a8a963cdf2be1fbac48ca1bfff15ddce755e3718c98affad3520ad73bd097756c557e71d7c763f8f676677e", 0xef, 0xfffffffffffffff8) keyctl$negate(0xd, 0x0, 0x5, r2) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r3, 0x3309) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x272}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4006010}, 0x4010) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f00000004c0)) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000600)={0x5}, 0x4) 19:07:36 executing program 1: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x52}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0xc800}, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x10001, 0x2f53, 0x0, 0x0, 0x16, 0x9, "a0433d9382db1448708ccc8f8fffefd1347cc61eaa3ef3eb97c6d27558c10d2e6ace8f873a3a23181f8f79ffef5ef754b07155e06a82f90ba434a5ffe77cba1c", "a785dbebf4217a21bbda9cd921db77207369d2641bc9bd2aacec65e26093cda04d0d26ed7873f7371b453f69770c15d47092eb631be72817d0929ee3dab7b5f3", "06e5fd31cb36c89a0692a606ed0d51afa8d50a2b9678ca9450586b2b3c314869", [0x3, 0x80000001]}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x5) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000400), 0x303000, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000003c0), r2) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x84800) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) sendmsg$NL80211_CMD_SET_WDS_PEER(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xc0000804}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040001}, 0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000001240)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001200)={&(0x7f0000000640)={0xbb8, r4, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_FUNC={0x3a8, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_RX_MATCH_FILTER={0x39c, 0xd, 0x0, 0x1, [{0xac, 0x0, "8dfd07b473f25c1d6a1090e099c8a0f67b9d652ba840cc48c8086e021d855381f3fb00c7f49ad36df3b7dc588c7d3147beb3e22077692e1b49dd54d1d3830b613a6b51e8a67e3dcf1f8d7324bc35af9d28a8dcc035dac5f6975939932f27741c8f0f713c8cb621cc9850809907c4d55fb3b6a4f7f38accd5270240e08b1a27b602ba4a47f955b3f68124b8e8e0c37fbe5b097259f5814b89132dd49e4c032abb511bca9ac57bff91"}, {0xa4, 0x0, "760f84877eabf916e482ddb84b0d898da0bcf176c0798f26d917f0e41989e63fdd3a94ea1662327d00e604addf86e700690c667a28b8868f1a7be48781cc649de2e476e1aa9e40f4889d01c6c78a62ed31d81aee69e0efb0a6292ed507838241a547fa116061227d311d080ad0f3f1746769ed03a28bdd9f9f78e78d0871e60e3359c314df5f1cae1cb2a300919ab70f4170452427bac81ea83464e3e3e3e677"}, {0xee, 0x0, "1326f3d115b599b4ddcc90e771e0e59295bd16a6c3555bc673ee6ab48e8516c82df477d6d24736b784a6452f6cb58beb0de995feeff53db1a098ee42ce4de72158fd5ac75390a542ca10355284ca379c914e4d783aa976c5ec633420628800d5ff9f97c29f538dbb17687bf0607589ccf6287976cb9532c780c69f66e04775e15d0b5483c831569a63c21fb5e68b5735813ef8d95e18fedd0095a7a0f506502d9016ade86b6a862b3f0d0b8aa376a0100a45765ec32dc3bbb3e7e14b25bd7e351f2e3911fb43c8ea12e4f6b7e51f6858459a370d863b81c3668f6e52a75882721215df83389bbc9cf5e2"}, {0x6c, 0x0, "482eb414b0fcfd7246ff1be281abfe3b1eb5e5d091a49f0e4549110dfe82fe16ba9e871950ef7fc62a94779530dded7e4bbd3efee2ee8c5ecac89173be368281168f228e4a44c6fe130f112476772b686e0b8553c31a38d39283741bfaa409b8380aff7c9796731d"}, {0xe9, 0x0, "efad73145cc729126ed203b0581b8ba83df19771118c56b88e38a40e551f2d5050132b2ec4e9b3454cf29873a70ce1c61de301bf285661077a49560e8344859f744194c98f77bf44637145d37c4c98d25c47221ac85692ac796c3e3245df831a0f2bf54c09202af83c7c79d04441879d3d9c7ef8c546085002df5c52d151c2304bd035ca8bc39b1e12341b07ab67f87ab821803bf9a2305a67bf1c880193c55b1b8a2c0688223cb1b2c3c4fca9ec4cbb9c99681c0e658cf9bf7aa792c88ab654f9945e77dc1cb83758f950ba1b09deff1ee19009295dde76ca7c94cfb0d7c4cd814a61e032"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x6}]}, @NL80211_ATTR_NAN_FUNC={0x624, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x3}, @NL80211_NAN_FUNC_SERVICE_INFO={0xcf, 0xb, "5ffdd0914d2f27fbe5f86eb7c6d53f09d1736dec68ca98779ec3d0192e53b9c565896328ffc4f028b59a4f9906dcfe39185ae7a33b8aa4390b964faf1404045abd831db5981f8c211fb8970a6aabde2618dceff9edd9373236b06dfa5a5c1c22ba5f1832000628559bc1d0e39098f7eb748296f58e6e43f997e4a767e4b27ddb0319c9d082597ac014f107a9bba205b709849cf93610111b9d5207ee81094f1152a68a9bc5eeea5c960c1d69d1bc9a364cff8100df767e78e38a3772791bce874a4777873d8864b976be41"}, @NL80211_NAN_FUNC_RX_MATCH_FILTER={0x290, 0xd, 0x0, 0x1, [{0x17, 0x0, "2a3e72dabdb649895b8657a153a31e09e01612"}, {0x2b, 0x0, "7b6e4eea938f9446ef3a3e618b57b5ada1fd92f6ba080807bad227364365c786fad28b29119152"}, {0x18, 0x0, "5abc737b284ca54421fd48d0555c79c794610812"}, {0x6d, 0x0, "49e7f4d4a7eefed80039d910c6c56e4a09be6b1d01dc0e1c28ad2790f3b9cc3d0e593a1bb429b638f3a7659e87b7dec03bed41ef5ecbf1898f4dc259abecf2cd2eae1018a66aa4147d75c91121f6bbc7bcd427c8e3e826e2eb0579aac54ae671a63265214319d967fd"}, {0xee, 0x0, "506b952ec8c8ff6b7ce38e6735246435a3231867e45203070321303b19272d94c608a45676f8bd7d5847c3b96b28740ef71393cd52987a679ada360b39ee8d6ba92c7867ad313c738ee1681e420414a8d8dc4c454f6448d62e0e1a1d788297f97bf11cb2d1f8a1fd025d344302683d97fa12c86e94017a4ccfc90bf07edbf366e9a0edae0bb0a6b962ce75c5527a472d354d4b5a26471fd80d964538cddf0351fd8f9c872535c2eb4697a21f8c6dcb6217918133ecf345fff8c59523fdb4a44aac989d0c2acc68e350b11eec161d645df7e892ae5b2e5828646828531ddc87fea5b833b71139186b5acc"}, {0x1b, 0x0, "fdf5f4df16bcca036d8d60ee815429bfca4f412f29501b"}, {0x8b, 0x0, "b69ba5fb27c97684721dc2b6d9a2ae1a3ed5307fc052c5de788016520a3059bcf10cfdb7c68cb27c27ed6c862cc052dea761d20d278cd317ad96221bd3e15aef2812e2aa2f716135fc04a7684d85a97ebb2631851ef7e92ef2d0ea2936c08aa5263be2545393b13d1b33d2d7177c7b41bf7b74e15965825c10e51c3e02b1883fc932194f55538e"}, {0x27, 0x0, "80771917fe21d8d1e980d86c543b3d59a6f198496cb33b2eede48c24e376607323769e"}]}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x294, 0xe, 0x0, 0x1, [{0x8d, 0x0, "eebe1a7c425e8c1b1ecf3fcd5b3eeb1659eadd7c3d0d25991562c3a87ef4306204b8a71fbcc5703ad423783668ef9f278bb82816435a06a2288b278648feb34b34bea61289b50e151247e28b075d9a694404446f9b99a2ed54235cdae70564c6617c8ea76332fbdc98801c718e8074ef902680f71eadcf85032df4728d4886a4efd054ad0eac575852"}, {0x36, 0x0, "067cced93cf53bde5e89b98ecdfa9b068ffec50413e4311311b4df8a66284210511345d4f22d57f1c6bf4d68761b5b3807b4"}, {0x62, 0x0, "3f35ace7f083d96cf94fafa96083d8dde79379b7bf85f882ccf6603215bdb162df375a023680a9c5cd1ebbb8831388b50cb5c2ef4a34a9de003ff6db185e7681abe14eb8ff21fad4e58e2f8a680bea454e4e0af71136296e48ecf6c700a4"}, {0x7b, 0x0, "135c8ff8f6c94f57aa2491b5b601fd3d1ad87475c60476c55c4ea46faee679930ff3ed3f18ca32a03e79be9fd71ed80bcab6918e24a469c435ade89421b985b90bb88053c279b4bff4baa4f30f8c8519b91f7ec229c1378528a892dbc4e8c594e81b2ae9676d5f436ff33de10dfc2eac8111f06d35c85c"}, {0xe6, 0x0, "f0c295fa2fb4b596711f78adc17bdeb6924b51e6e55f4ab9ee2088d12998de228714e3d2bc042e03cdd85ff5209a1c10813de6967ff41710ad83a6e6d2c4336432cc0fa65b61eff65ab7c8fa079a62425be19b5d8b87547893f4c0efa6e2bad4135a32f0a4439dc85a1c1b72c9b230daf1c36a5dc39a58877c31f5744bc86bbc728517812446668ab72149c540ea811b5962b1f44fe54510d1621e8a9504ca824d006eb17949c55902ebe7ed26d0721b0dfb353b1d0fb60a5fb353205e59f601fd643af7db0984edcc10bbc3af132a26a146539b1bce61ff48f3dcb8779bda61b880"}]}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "3e50bfd535ca"}, @NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x2}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xc0000000}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x1cc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x65}, @NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x3f}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1a0, 0xe, 0x0, 0x1, [{0x53, 0x0, "c575472bbdd99539bc9de8b043b30075c00eb96e439156c834285b8afde9b68dff1b7e93556c967ae8f1b09688e40705c3981012c6d91980591b5ef90062d02f6219e28e192770514d4773c481cce0"}, {0x4c, 0x0, "a406fece40a93fe856ad817bdafd9ce3fb91bcb42ad08f0bddf01ed70ea98d7f8f02c25dfcadf2a45941e2c2068446f3c7ef4aee3a3f098befeee3dd896a433c4f4c6f31081133f3"}, {0xc8, 0x0, "535374d974bd67f7aac757c9984a87dd08509063b6bee132b1a61dec288f4511e3c06ebbaf5e9ae10c50ba3d1abbf70dbfb6dde56f27dcf786f1c29c3494674f44701891024bbba19edf51175094da94ce4232ce6ea7e109e5c5fb9a71e738c28a8553e595ea83022b9adf29ab97ec4303565528eb86174aad0a1d799f0b98fcfcf1a931d88c857deabfccaa76977708ddd111dfa7527bda33ab9fb711b5319ea1bb9727a9acd585871e2cd16057f1c97f2a64cc00bdef466557214828b2b3630833d315"}, {0x33, 0x0, "a099a01ea889163d3ff7c596ee473c7f4822009ddfc4b9c97ea0d9c2f366a09a754dc075b3ab75365f38b6314c0e88"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_TTL={0x8}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_REQ_ID={0x5, 0x7, 0x80}]}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000001400)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x70, r5, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x101, 0x14}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "d5edab4167"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "ac86fd446b804eb01d6711abe7"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x70}, 0x1, 0x0, 0x0, 0xc850}, 0x40000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_IBSS(r7, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x800, 0x27}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x20000810) 19:07:36 executing program 4: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x401}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x258, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2047e23ce91d417aec4e4a72782461d4b48ba48b6fa490484d35c55d969b8f0f"}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7f}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa348}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x64}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x158, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f33db6a4f57bc27c6d687786f984a9c8"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e0a3d80b97954bc6f020c1e0d11bb973"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8ecc60c4b746478f2e8bb91cec9322a6a382dc4e9584afa269f9d85cdad55ad0"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xff}, @NL802154_KEY_ATTR_ID={0xb0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x4}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa92}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x81}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "28235234eeb12ac447a3dfee599c610dc94a6b9bebd1c9e2107f83da33ee0177"}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x88000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24004050) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3d}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000095}, 0x90) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4814}, 0x85) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xa0, r4, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) accept4$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}]}, 0x34}}, 0x4008009) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x28, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x74}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan3\x00', 0x0}) r8 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x60, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048810}, 0x81) [ 82.970121] audit: type=1400 audit(1736881656.572:7): avc: denied { execmem } for pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:07:36 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x20a680, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x44104}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x2c}}, 0x4000084) r6 = syz_io_uring_setup(0x45d8, &(0x7f00000003c0)={0x0, 0x784, 0x10, 0x1, 0x3c2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r7, 0x0, &(0x7f0000000500)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0xd2d, 0x0, &(0x7f00000004c0)="76bc3ed88efdcb1a8b7b38d624ce901be087f4eca949", 0x80000000}, 0x3e23) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x110, r4, 0x10000000) syz_io_uring_submit(r7, r8, &(0x7f0000000680)=@IORING_OP_SEND={0x1a, 0x1, 0x0, r5, 0x0, &(0x7f0000000640)="12a61121142b8ef285a2231eb89442828a525148a36bcd2d86fed5f6c163eef9f4f91dd64999a613", 0x28}, 0x7) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800), r2) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0x0, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xe55e21b1ff193a6d}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xc5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x645b}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x2000c084) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), r2) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r10, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000cc0)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, r10, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 19:07:36 executing program 6: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x82100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x88, 0x0, &(0x7f00000002c0)=[@free_buffer, @increfs_done, @free_buffer, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/135, 0x87, 0x1, 0x18}, @ptr={0x70742a85, 0x4377, &(0x7f0000000140)=""/176, 0xb0, 0x2, 0x18}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}], 0xd5, 0x0, &(0x7f0000000380)="549562aa7182647d74fd0192bab7e8bf5a8b64d2d8dc17471ab665aba24b63cbb3edaab3a95b8c3ee2dcaadf089c88752dd23bb9b3c75d82fec86cb6dfd33245f8a751ad9ac0ec222399ae0eab87cf86061b6a8e42982b54e2b0d545018d3ca0b89cde727a0540673595c845ae361d138231a297961a36c08dffacf80b94cef9f9b4cf988d60df8d9f89e01da8a16eb1bd422efa1cd436716d54d481644a1e21c930fa983eaff5d4e985e7d26d839005af6a2984860f365bb0cf2bd65a33902ecf55d17af1356717ce0ff68755ebabb5e6019e137f"}) r2 = socket(0x1d, 0x5, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x610, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}]}, 0x34}, 0x1, 0x0, 0x0, 0x854}, 0x20000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000840)=0x14) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x4000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) read$snapshot(0xffffffffffffffff, &(0x7f0000000980)=""/97, 0x61) pipe2(&(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$packet(r8, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a80)=0x14) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r10 = accept4$packet(r1, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000c80)=0x14, 0x180000) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000cc0)={0x0, 0x2}, 0x4) 19:07:36 executing program 7: bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x1b, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x10001}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc800) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/user\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000050) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) r3 = accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f00000005c0)={0x37c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r0}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x44080}, 0x808) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x40, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x18}, 0x20000080) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000b40)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x5, &(0x7f0000000b00)={0x77359400}, 0x1, 0x0, 0x1}, 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000bc0)=@getsadinfo={0x230, 0x23, 0x100, 0x70bd2c, 0x25dfdbff, 0x0, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0xff, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@broadcast, @in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x3, 0x0, 0x3501, 0x2, 0xa}]}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x8}, @lifetime_val={0x24, 0x9, {0x4, 0x0, 0x20, 0x3}}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xf}, @in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x2b, 0x3, 0x0, 0x0, 0xa, 0x2}, {@in6=@mcast1, @in=@empty, @in6=@mcast1, @in6=@private0, 0x3c, 0x1, 0x0, 0x3502, 0xa, 0xa}, {@in=@empty, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_comp={0x4a, 0x3, {{'lzjh\x00'}, 0x10, "92c4"}}]}, 0x230}, 0x1, 0x0, 0x0, 0x2000c081}, 0x40000) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000ec0)={0x5, &(0x7f0000000e80)=[{0x587, 0x7f, 0x1f, 0x8000}, {0x5, 0x5, 0xe9, 0x7}, {0x5, 0x3f, 0x0, 0x80000000}, {0x0, 0x1, 0x8, 0x401}, {0x8, 0xc0, 0x6, 0xfffffffc}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000f00)={'batadv_slave_0\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x68, r8, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x20}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x91}, 0x20040800) syz_io_uring_submit(0x0, 0x0, &(0x7f00000010c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd=r5, 0x3, 0x10001, 0x7f, 0x11}, 0x3) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001240)={0x260, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x7fff, 0x4, 0x3f, 0x85}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xef, 0x6, 0x6a, 0x1}, {0x5, 0x3, 0x2, 0x5}, {0x5, 0x2, 0x6}, {0x3ff, 0x4, 0x81, 0x4}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x260}, 0x1, 0x0, 0x0, 0x48040}, 0x40004) [ 84.193111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.195453] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.200596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.208227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.211273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.213221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.388868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.405872] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.410393] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.415669] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.420409] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.425356] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.436869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.442372] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.446168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.457753] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.458178] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.459157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.462057] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.467497] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.471477] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.476343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.482073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.491065] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.496191] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.502132] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 84.510509] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.516454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.526037] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 84.543397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.547662] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.553583] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 84.554253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.554609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.565440] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 84.579435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 84.583434] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 84.585865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.588408] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 84.597647] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 84.601369] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 84.605430] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.611475] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 84.614418] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 84.616788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 84.634458] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 84.635584] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.637105] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.287132] Bluetooth: hci0: command tx timeout [ 86.605019] Bluetooth: hci2: command tx timeout [ 86.605053] Bluetooth: hci1: command tx timeout [ 86.668140] Bluetooth: hci3: command tx timeout [ 86.732096] Bluetooth: hci7: command tx timeout [ 86.732124] Bluetooth: hci4: command tx timeout [ 86.733406] Bluetooth: hci5: command tx timeout [ 86.796079] Bluetooth: hci6: command tx timeout [ 88.332040] Bluetooth: hci0: command tx timeout [ 88.652020] Bluetooth: hci2: command tx timeout [ 88.652072] Bluetooth: hci1: command tx timeout [ 88.718157] Bluetooth: hci3: command tx timeout [ 88.780056] Bluetooth: hci5: command tx timeout [ 88.780178] Bluetooth: hci7: command tx timeout [ 88.780255] Bluetooth: hci4: command tx timeout [ 88.844004] Bluetooth: hci6: command tx timeout [ 90.381162] Bluetooth: hci0: command tx timeout [ 90.700464] Bluetooth: hci1: command tx timeout [ 90.701128] Bluetooth: hci2: command tx timeout [ 90.764070] Bluetooth: hci3: command tx timeout [ 90.828073] Bluetooth: hci5: command tx timeout [ 90.828792] Bluetooth: hci4: command tx timeout [ 90.829083] Bluetooth: hci7: command tx timeout [ 90.892036] Bluetooth: hci6: command tx timeout [ 92.428091] Bluetooth: hci0: command tx timeout [ 92.748106] Bluetooth: hci1: command tx timeout [ 92.748341] Bluetooth: hci2: command tx timeout [ 92.812095] Bluetooth: hci3: command tx timeout [ 92.876562] Bluetooth: hci7: command tx timeout [ 92.876643] Bluetooth: hci5: command tx timeout [ 92.876774] Bluetooth: hci4: command tx timeout [ 92.940245] Bluetooth: hci6: command tx timeout [ 144.294323] syz-executor.3 (283) used greatest stack depth: 24064 bytes left [ 144.462493] syz-executor.7 (288) used greatest stack depth: 24032 bytes left [ 146.587435] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.590801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.593811] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.598864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.604140] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.607364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.722908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.726675] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.732605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.738525] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.740953] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.743155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.802195] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.804271] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.811271] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.829732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.835529] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 146.838770] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.850850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.858817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.862045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.864165] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.878515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.879376] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.879759] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.889198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.891587] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.918089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.920221] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.920865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.923119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.925122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.925545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.927774] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.929091] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.929459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.940394] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 146.947756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 146.952086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 146.962116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 146.964513] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 146.965285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 146.965649] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 146.965780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 146.972237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 146.998031] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 146.999762] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 147.000191] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 148.684037] Bluetooth: hci0: command tx timeout [ 148.814142] Bluetooth: hci1: command tx timeout [ 148.876080] Bluetooth: hci2: command tx timeout [ 148.940022] Bluetooth: hci3: command tx timeout [ 148.940415] Bluetooth: hci4: command tx timeout [ 149.004228] Bluetooth: hci7: command tx timeout [ 149.004719] Bluetooth: hci5: command tx timeout [ 149.068063] Bluetooth: hci6: command tx timeout [ 150.733120] Bluetooth: hci0: command tx timeout [ 150.860173] Bluetooth: hci1: command tx timeout [ 150.924297] Bluetooth: hci2: command tx timeout [ 150.991055] Bluetooth: hci4: command tx timeout [ 150.991250] Bluetooth: hci3: command tx timeout [ 151.052198] Bluetooth: hci7: command tx timeout [ 151.052345] Bluetooth: hci5: command tx timeout [ 151.116178] Bluetooth: hci6: command tx timeout [ 152.780133] Bluetooth: hci0: command tx timeout [ 152.908112] Bluetooth: hci1: command tx timeout [ 152.972245] Bluetooth: hci2: command tx timeout [ 153.036139] Bluetooth: hci4: command tx timeout [ 153.036349] Bluetooth: hci3: command tx timeout [ 153.102163] Bluetooth: hci7: command tx timeout [ 153.103447] Bluetooth: hci5: command tx timeout [ 153.164170] Bluetooth: hci6: command tx timeout [ 154.828015] Bluetooth: hci0: command tx timeout [ 154.956014] Bluetooth: hci1: command tx timeout [ 155.020455] Bluetooth: hci2: command tx timeout [ 155.084060] Bluetooth: hci4: command tx timeout [ 155.084263] Bluetooth: hci3: command tx timeout [ 155.148207] Bluetooth: hci5: command tx timeout [ 155.148288] Bluetooth: hci7: command tx timeout [ 155.213048] Bluetooth: hci6: command tx timeout [ 205.315837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.315990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.415340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.415421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.274095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.276220] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.280428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.285769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.287722] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.289959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.403834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.407345] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.409317] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.412201] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.415054] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 208.416270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 208.473186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.480227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.483506] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.490646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.495718] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.496768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.549430] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 208.553131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 208.554525] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 208.558656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 208.562218] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 208.563749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 208.608550] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 208.611891] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 208.614203] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 208.619391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.620381] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.623265] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 208.625316] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.628379] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 208.629459] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 208.630972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.632685] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.635001] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.657470] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.687181] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.688085] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.688845] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 208.699088] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 208.715023] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 208.738160] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.750142] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 208.750152] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 208.755141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.767173] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 208.774030] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 210.316036] Bluetooth: hci0: command tx timeout [ 210.444099] Bluetooth: hci1: command tx timeout [ 210.572084] Bluetooth: hci3: command tx timeout [ 210.573229] Bluetooth: hci2: command tx timeout [ 210.764085] Bluetooth: hci5: command tx timeout [ 210.765037] Bluetooth: hci4: command tx timeout [ 210.829322] Bluetooth: hci7: command tx timeout [ 210.831287] Bluetooth: hci6: command tx timeout [ 212.364943] Bluetooth: hci0: command tx timeout [ 212.493981] Bluetooth: hci1: command tx timeout [ 212.621942] Bluetooth: hci2: command tx timeout [ 212.622041] Bluetooth: hci3: command tx timeout [ 212.814188] Bluetooth: hci4: command tx timeout [ 212.814288] Bluetooth: hci5: command tx timeout [ 212.878952] Bluetooth: hci7: command tx timeout [ 212.879045] Bluetooth: hci6: command tx timeout [ 214.412853] Bluetooth: hci0: command tx timeout [ 214.541392] Bluetooth: hci1: command tx timeout [ 214.669988] Bluetooth: hci3: command tx timeout [ 214.670174] Bluetooth: hci2: command tx timeout [ 214.861100] Bluetooth: hci5: command tx timeout [ 214.861295] Bluetooth: hci4: command tx timeout [ 214.924640] Bluetooth: hci6: command tx timeout [ 214.924826] Bluetooth: hci7: command tx timeout [ 216.460224] Bluetooth: hci0: command tx timeout [ 216.589464] Bluetooth: hci1: command tx timeout [ 216.717056] Bluetooth: hci3: command tx timeout [ 216.717244] Bluetooth: hci2: command tx timeout [ 216.908088] Bluetooth: hci5: command tx timeout [ 216.908275] Bluetooth: hci4: command tx timeout [ 216.972156] Bluetooth: hci7: command tx timeout [ 216.972309] Bluetooth: hci6: command tx timeout [ 270.624028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.626534] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.629429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.646530] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.650260] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.653071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.818567] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.821799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.826273] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.831393] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.838855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.841540] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.009055] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.015014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.019377] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.034931] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.042766] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.049668] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.069120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.085134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.088731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.108947] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.113539] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.131428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.219194] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.227413] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.248750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.274707] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.278511] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.285133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.350406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.356669] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.366269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.375323] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.379165] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.383110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 271.395785] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.406211] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 271.407324] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.413341] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 271.439325] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 271.447238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.506635] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 271.508457] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.520318] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 271.594305] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.596159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.620142] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.716135] Bluetooth: hci0: command tx timeout [ 272.908016] Bluetooth: hci1: command tx timeout [ 273.100577] Bluetooth: hci2: command tx timeout [ 273.164949] Bluetooth: hci3: command tx timeout [ 273.421126] Bluetooth: hci4: command tx timeout [ 273.484036] Bluetooth: hci5: command tx timeout [ 273.804710] Bluetooth: hci6: command tx timeout [ 273.805315] Bluetooth: hci7: command tx timeout [ 274.763981] Bluetooth: hci0: command tx timeout [ 274.957938] Bluetooth: hci1: command tx timeout [ 275.148115] Bluetooth: hci2: command tx timeout [ 275.212130] Bluetooth: hci3: command tx timeout [ 275.468001] Bluetooth: hci4: command tx timeout [ 275.533938] Bluetooth: hci5: command tx timeout [ 275.851994] Bluetooth: hci6: command tx timeout [ 275.852594] Bluetooth: hci7: command tx timeout [ 276.812132] Bluetooth: hci0: command tx timeout [ 277.003959] Bluetooth: hci1: command tx timeout [ 277.197956] Bluetooth: hci2: command tx timeout [ 277.259993] Bluetooth: hci3: command tx timeout [ 277.516225] Bluetooth: hci4: command tx timeout [ 277.580621] Bluetooth: hci5: command tx timeout [ 277.901040] Bluetooth: hci6: command tx timeout [ 277.902331] Bluetooth: hci7: command tx timeout [ 278.860180] Bluetooth: hci0: command tx timeout [ 279.051977] Bluetooth: hci1: command tx timeout [ 279.244124] Bluetooth: hci2: command tx timeout [ 279.308017] Bluetooth: hci3: command tx timeout [ 279.564937] Bluetooth: hci4: command tx timeout [ 279.628054] Bluetooth: hci5: command tx timeout [ 279.948240] Bluetooth: hci7: command tx timeout [ 279.948396] Bluetooth: hci6: command tx timeout [ 333.034317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.038757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 333.039599] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.046669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 333.048656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.051253] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.056470] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.059400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 333.059789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.080085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 333.082093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.086125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.090451] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 333.092434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.092777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 333.098459] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.101365] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.104391] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.172833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 333.179509] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 333.181828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 333.188337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 333.191066] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 333.198048] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 333.209444] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 333.214061] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 333.216581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 333.225412] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 333.232548] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 333.235776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 333.243961] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.245710] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.249198] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.253220] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.261325] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.278645] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.281661] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.283107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.289469] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 333.290470] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 333.291260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 333.292610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.354092] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 333.357528] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 333.363318] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 333.369226] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 333.376285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 333.378621] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 335.180031] Bluetooth: hci0: command tx timeout [ 335.181782] Bluetooth: hci2: command tx timeout [ 335.182040] Bluetooth: hci1: command tx timeout [ 335.309511] Bluetooth: hci4: command tx timeout [ 335.309846] Bluetooth: hci3: command tx timeout [ 335.372049] Bluetooth: hci6: command tx timeout [ 335.372226] Bluetooth: hci5: command tx timeout [ 335.436939] Bluetooth: hci7: command tx timeout [ 337.228015] Bluetooth: hci2: command tx timeout [ 337.228114] Bluetooth: hci1: command tx timeout [ 337.228202] Bluetooth: hci0: command tx timeout [ 337.357089] Bluetooth: hci3: command tx timeout [ 337.357312] Bluetooth: hci4: command tx timeout [ 337.420939] Bluetooth: hci5: command tx timeout [ 337.421019] Bluetooth: hci6: command tx timeout [ 337.483942] Bluetooth: hci7: command tx timeout [ 339.278932] Bluetooth: hci0: command tx timeout [ 339.278958] Bluetooth: hci1: command tx timeout [ 339.279052] Bluetooth: hci2: command tx timeout [ 339.404078] Bluetooth: hci3: command tx timeout [ 339.404098] Bluetooth: hci4: command tx timeout [ 339.468557] Bluetooth: hci5: command tx timeout [ 339.468580] Bluetooth: hci6: command tx timeout [ 339.531985] Bluetooth: hci7: command tx timeout [ 341.324970] Bluetooth: hci2: command tx timeout [ 341.325028] Bluetooth: hci1: command tx timeout [ 341.325087] Bluetooth: hci0: command tx timeout [ 341.451971] Bluetooth: hci4: command tx timeout [ 341.453137] Bluetooth: hci3: command tx timeout [ 341.516036] Bluetooth: hci6: command tx timeout [ 341.517138] Bluetooth: hci5: command tx timeout [ 341.580043] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 19:12:44 Registers: info registers vcpu 0 RAX=ffff88802f4f0001 RBX=ffff88802f4ef8f8 RCX=0000000000000001 RDX=ffff88802f4ef900 RSI=ffff88802f4ef8c8 RDI=ffff88802f4ef2a8 RBP=ffff88802f4e8000 RSP=ffff88802f4ef228 R8 =0000000000000001 R9 =ffff88802f4ef2d8 R10=000000000003ab2c R11=0000000000021ea0 R12=ffff88802f4ef2f8 R13=ffff88802f4ef2e0 R14=ffff88802f4ef8c8 R15=ffff88802f4ef298 RIP=ffffffff8134a5ca RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f89cb1911f0 CR3=0000000026c6a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff1100d9e13b1 RCX=ffffffff81502e47 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88806cf36250 RBP=0000000000000000 RSP=ffff88806cf09d70 R8 =0000000000000000 R9 =fffffbfff0c80592 R10=ffffffff86402c97 R11=0000000000000000 R12=0000000000000002 R13=0000000000000000 R14=ffffffff85c18b60 R15=0000000000000000 RIP=ffffffff8150307b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f91b6bfa020 CR3=000000002c1ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000