Warning: Permanently added '[localhost]:51837' (ECDSA) to the list of known hosts.
2025/01/17 12:05:32 fuzzer started
2025/01/17 12:05:32 dialing manager at localhost:45115
syzkaller login: [   74.739160] cgroup: Unknown subsys name 'net'
[   74.853391] cgroup: Unknown subsys name 'cpuset'
[   74.890178] cgroup: Unknown subsys name 'rlimit'
[   80.891935] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
[   91.618853] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
2025/01/17 12:05:52 syscalls: 200
2025/01/17 12:05:52 code coverage: enabled
2025/01/17 12:05:52 comparison tracing: enabled
2025/01/17 12:05:52 extra coverage: enabled
2025/01/17 12:05:52 setuid sandbox: enabled
2025/01/17 12:05:52 namespace sandbox: enabled
2025/01/17 12:05:52 Android sandbox: enabled
2025/01/17 12:05:52 fault injection: enabled
2025/01/17 12:05:52 leak checking: enabled
2025/01/17 12:05:52 net packet injection: enabled
2025/01/17 12:05:52 net device setup: enabled
2025/01/17 12:05:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/01/17 12:05:52 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/01/17 12:05:52 USB emulation: enabled
2025/01/17 12:05:52 hci packet injection: enabled
2025/01/17 12:05:52 wifi device emulation: enabled
2025/01/17 12:05:52 802.15.4 emulation: enabled
2025/01/17 12:05:52 fetching corpus: 0, signal 0/0 (executing program)
2025/01/17 12:05:54 starting 8 fuzzer processes
12:05:54 executing program 0:
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800)
accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800)
syz_open_dev$rtc(&(0x7f0000000100), 0x3f, 0x8000)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x40, 0x7, 0xc6, {0xc6, 0x22, "16b7959b2c99a06568dabff00bda8055ecdd317ae92b552eef4db76e5b2f1e0bc2c6c0a427159ad3e61d3ae4a8dab4d89c506f5469732a8df0ad85b301cdc33b7aa1eadc2ebe867fcac5686c8e0d0779a16bc40c246187ed01efc22332da9d1284b146c04cb57a53a184fa1f32e14ef290465906b3742955ea56260053c980cab08107d6229de0417d6001487a6e4092c8d1978d3371371103394dcdd91253888dfb08e369ad904af3a49964e84117fbcacc717e1cd47a04a9fa23eb00ca2e43f34eeaf6"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f0000000280)={0x0, 0xf, 0x112, {0x5, 0xf, 0x112, 0x5, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x47, 0xf00, 0x81, [0xfdedccfe20123828, 0x3f00, 0xf, 0xc030]}, @ptm_cap={0x3}, @generic={0xe0, 0x10, 0x2, "cce5cfc15e545ac208cb8db246b0e7a29b959e9e741341f9768d2f5b9ac91f3285669b08ad0f11a56ceea08683700d54c95d531e634dd8b5fc563f0de6cb2a8cb8e7b01aaa5d7315557a19c17835399cf11ab9a8e420ed5f2aaa1107b773fd192bcd816d90f836ae456a5dcb724c8c39ee0b7a34f7e1d310cb8271d2afda8974c6a0b6c038faa6e2a4c0cf1a36695575324da873b0d332d006388216d10b69f663860c1d8966774a6d1ad5c01bcc86132c1ce1c19db0472c656606e99ef741178246dc66ceab27ff633d47f165c2f2b80ff67bab60806538a699660976"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x13, 0xb6, 0x71, 0x2eb, 0x8}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x60, 0x81, 0x3, "3a29facb", "8cd9757f"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x80, 0x0, 0x0, 0x1, 0x9}}}, &(0x7f0000000940)={0x84, &(0x7f0000000480)={0x40, 0xf, 0xed, "c91cc97e34a14141685554ad321b571f1f3567c3bce1a261350725a56787129845ac4d51c565a38526358bfe621371b1c749bca12d629993d495749f955602e0d6949a83512942180160be0d60977c4f68c75062258dc6a14537abf3d748802ee6d19a20ff183920261de42ead6f7ad27edaba375a80eb812e8dae9ace3211b8ecef9672efed5331b95d88889d8b8177c6491751fb0f21c88b48ba66a5ca6d0561645fe574f6c09ce441b0279273d42fa51cb1a12ab979cadefcbcc3f692a358cb5e3ce67d1813e427fc56a73f590a6126f94e75834908fa9c554ffeafcd37e0cd6262975b53e73446b1b72dbc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000600)={0x20, 0x0, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x8, {0x240, 0x1, [0xf0ff]}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x730}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0xdc}, &(0x7f0000000700)={0x40, 0xb, 0x2, "407f"}, &(0x7f0000000740)={0x40, 0xf, 0x2}, &(0x7f0000000780)={0x40, 0x13, 0x6, @local}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @random="e88d08989c7d"}, &(0x7f0000000800)={0x40, 0x19, 0x2, "58f4"}, &(0x7f0000000840)={0x40, 0x1a, 0x2, 0xfe00}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0xf8}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x4}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000a00)={0x1f, 0xff10, @none, 0x177, 0x1}, 0xe)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000a40)=0x1a, 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x684840, 0x0)
sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x4a4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x24, 0x0, 0x900, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x4000)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x47, 0xa1, 0xc8, 0x20, 0x12d1, 0xaa9a, 0xc4f6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x5, 0x80, 0x40, [{{0x9, 0x4, 0x30, 0x75, 0x0, 0xff, 0x3, 0x1, 0x81, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x77}}]}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x201, 0x3b, 0x8e, 0x7, 0x40, 0x40}, 0x152, &(0x7f0000000d80)={0x5, 0xf, 0x152, 0x5, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0x3, 0x1}, @generic={0xd8, 0x10, 0xb, "8e1d5ef5a4600111456c61bdabbcf4e56b0df10d586d5b8bd12cd450298df5b3be77a8eb06295ea2a609f5504688c950a0b3c3b112bfb81d06e91fe5bbd5fe9fd692e4cacb1ab78fe9f2e8f7d037ac17dea7a5d02e169bbcf643bb08757d409229190b6bc5b6f7b757fd33f5689cf93ce4e468e03d16c5c5f0d68ceaafb96b70322c0e7637129e9390ed9a5b5be0cb7eb739819dcf3102deca1f6ff10619010dca992973eb3265df4fc56a9fad53b3207215043aadf1acb7207226f9c2d172f3eb77eab5e53aeaefc5f1d9b1bde4054420bfa124d7"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x5, 0x6, 0x8}, @generic={0x5e, 0x10, 0x4, "dd63194e44579694b2e53a9889261df67d377d6bb8c00d55acca2cfcdc1fbb27bf37eaa7d1138693dac7ac3a355b72669fb9db4cd4022a79e05800bc619ebfcff54ef28c95b5f315058be57fce7d2836d86e6e62a088b39b3e0347"}]}, 0x8, [{0xf, &(0x7f0000000f00)=@string={0xf, 0x3, "e55f48100b7ea14d457649afa6"}}, {0x5c, &(0x7f0000000f40)=@string={0x5c, 0x3, "9ebf96aa17f8fe796e805a47bdd2320c0a197861920492fc9aae2e991b11aa08f0035cc1abf70c066acea61ab50997cdf84857ccd9d62f476f8939d204b24fdb6d3cbd887f87cb45a4112090bb39f68a03231dc594b29a8fd3b9"}}, {0x41, &(0x7f0000000fc0)=@string={0x41, 0x3, "946335ef6b514c66204c1076ee6e7d5e3bab5b36e594031b3cdb3db2d500ca8e18421fc8f41c448e8d6e98b401c037adf4f38f8c708ad6fd295f1313c04193"}}, {0x56, &(0x7f0000001040)=@string={0x56, 0x3, "6ffa4e99c7d4e02bef4dec5879b68ffd7cebd8d0a47751e975d422b7eb20daf5468018dc5a4a44f748410864b75b3b6f410f0ea6c77db63a8d218da19753e58e642563c6ee15eba8da54d59fccf4bf00be3e4a19"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x409}}, {0x87, &(0x7f0000001180)=@string={0x87, 0x3, "3212c06fec6afa4186f42d2cf80333c3fb90aeb1226eb2d98c5b4d3b62f24a2dd16325f6ec7ba666cc0aa540618ae581244f5ce13b3fc4aa0ddc5f4d30dfa232c8eb98637f7891f5050bd8cd2a2cfb80f0ee415a2051bafd4f94ccb89da08d62b84e5a530c7c550005d2917f3d8464a590fdcf3c49d041f0e3e7bb92773373d0fb90f70c3f"}}]})
syz_usb_control_io(r5, &(0x7f00000014c0)={0x2c, &(0x7f00000012c0)={0x40, 0xa, 0x5c, {0x5c, 0x10, "382ab149d12817fbef85123c947aa169bd200bbac05716a4322642687c81d72ea9bcd5e997108b9aab17ae08a88279c8bd61ddbff2f4116df1c0c71802550b0a1b9d6fc804e0896b85a6efdcab7c22160b9e5f783c089e578c52"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f0000001380)={0x0, 0xf, 0x9b, {0x5, 0xf, 0x9b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xd, 0x0, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x3, 0x1000}, @generic={0x71, 0x10, 0x2, "051236a4596867ab2e0e9771906f738c3215e8ff2e8cfa07babcb3554cf9e942fa51b9b1386ba851b615b77361076fa0379af28efc738845260822a771375370f4647be6c2ab69cdb495bfbfb06801a1bbc9ed176b356e36f108e9a9aac7fd6b807e4dba8383e9482b00cbedd0dd"}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "d29e9e6215da49e697139b6d115528c4"}]}}, &(0x7f0000001440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x20, 0x3, 0x7, 0x3f, "fc82dcc4", "0a1af757"}}, &(0x7f0000001480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x80, 0x3, 0x3f, 0x5, 0x1, 0x401}}}, &(0x7f0000001980)={0x84, &(0x7f0000001500)={0x40, 0x14, 0xa8, "0d5599190a6db4c8cb9c3b2cd3f7d3a5b86d6a8590f2046be8d3d38e77fe195037b9fbb151faddd59c2a97427d0b499de693d66b29d7979909d8f7849ca0843649acfabe3bab2a296e8ce1a84625a4ed9ce7839b919f3e32bb1d406cadb001c17f74b24ccf6a8066cccdb54d96a1a1d306aeafae43cc4c2c26b4c4bc40cfcce8c56d085a77c95742c3e6f83e94b609200cb072d2de3c54a856ccf3a26eec59b4136b24003d0ee76f"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001640)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001680)={0x20, 0x0, 0x8, {0x1e0, 0x10, [0xf0f]}}, &(0x7f00000016c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000001700)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000001740)={0x40, 0xb, 0x2, "b9d0"}, &(0x7f0000001780)={0x40, 0xf, 0x2, 0x7f}, &(0x7f00000017c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001800)={0x40, 0x17, 0x6, @random="f99cf8292132"}, &(0x7f0000001840)={0x40, 0x19, 0x2, "8b01"}, &(0x7f0000001880)={0x40, 0x1a, 0x2, 0x735f}, &(0x7f00000018c0)={0x40, 0x1c, 0x1, 0x69}, &(0x7f0000001900)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001940)={0x40, 0x21, 0x1, 0x7}})
eventfd(0x4)
syz_usb_connect$cdc_ecm(0x1, 0x88, &(0x7f0000001a40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x9, 0xa0, 0xbc, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "65cbdeeff9f2"}, {0x5, 0x24, 0x0, 0x5000}, {0xd, 0x24, 0xf, 0x1, 0x8, 0xffff, 0x1, 0x20}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x20, 0x81}, @acm={0x4, 0x24, 0x2, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xfff9, 0x1, 0x9, 0x3, 0x9, 0x13}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1f}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x8, 0x7f, 0x1f, 0x9, 0x6}, @acm={0x4, 0x24, 0x2, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x0, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1f, 0x80, 0x8}}}}}]}}]}}, &(0x7f0000001c40)={0xa, &(0x7f0000001b00)={0xa, 0x6, 0x250, 0x7, 0x7, 0x6, 0x10, 0x81}, 0xf, &(0x7f0000001b40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x81, 0x9, 0x3}]}, 0x1, [{0xab, &(0x7f0000001b80)=@string={0xab, 0x3, "a92e60e2b134ae8c5bf39779b82707267ca4a955e0adbb62c70e295c248113446807c0f55dae17c6cbe4d7cc63d3b2436994b46451d087d39d24828bf06bec548a9602712f0debbceec27b3d6c73c12d3058a9211673c8811a060ad8f681ec3170f6c972d33593787c8c35f2dae9acad01d46cdddb1dba05f951cdfed182631fe4939275b7f897669e8c0752cf98da8eb3480cd77ce4c5f2445695db4934e073020bdfae9fb84f29e6"}}]})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001c80), 0x400400, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x58, 0x13, 0x200, 0x70bd27, 0x25dfdbfc, {0x1f, 0x1, 0xe9, 0x3, {0x4e21, 0x4e20, [0x80000001, 0x0, 0x100, 0x5], [0x1, 0x4, 0xb1e, 0x1], r4, [0xfffffeff, 0x3f]}, 0x4, 0x1}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "728afb74903f70c7"}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40000)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001e40), r2)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x1c, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40)

12:05:54 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x4}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xb4, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd4d4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x48, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1000}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7643}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000084}, 0x8004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000004c0)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}}, 0x4000)
sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40020}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan4\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000011}, 0x4004884)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_ASSOCIATE_REQ(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x3}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x6}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4060801)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000009c0)={'wpan1\x00', <r11=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r10, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

12:05:54 executing program 1:
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x56c, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff, 0x1}, 0xe)
fstat(r0, &(0x7f0000000140))
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x6000080}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x14}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x36f1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x40ec7e4d29d69d9c}, 0x50d1)
accept4$bt_l2cap(r0, &(0x7f0000000440), &(0x7f0000000480)=0xe, 0x80000)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400084c}, 0x20044000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r5)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/uts\x00')
sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x5085)
sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c0)

12:05:54 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4008800)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000180)={'wpan1\x00'})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r3)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x810, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x24004)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xfc, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x62}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x22c6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x20008001)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x24, r1, 0x10, 0x70bd2a, 0x10000, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x41041}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000780)={'wpan4\x00', <r7=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x804)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan4\x00'}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x800)
sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x20000804)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x264}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5d59}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x24008000)

12:05:54 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x8080)
sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200408c0}, 0xc000)
sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40104010}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x60041000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x3c}}, 0x80)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r3, 0x204, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xf2d6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x300}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000881)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004800}, 0x4820)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, r5, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x698}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080005}, 0x2004c800)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8083)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r6)
sendmsg$IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x58, r7, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x15}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x80}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x8}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x13}]}, 0x58}, 0x1, 0x0, 0x0, 0x44030}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f00)={0xdc, 0x0, 0x220, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x7f}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x20008000)

[   94.463060] audit: type=1400 audit(1737115554.532:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
12:05:54 executing program 6:
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x6, 0x2, 0x3, 0x70bd25, 0x25dfdbfb, {0x5, 0x0, 0x6}, [@generic="d8839711909509ef1a7901802631a34875c2de55732860e1a03861eeddd5b57f"]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20004000)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, 0x4, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffff01}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x30000000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe2c}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8884}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x20048850)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x410200, 0x0)
ioctl$RTC_PIE_OFF(r0, 0x7006)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x11}, 0x4)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000540))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000580), 0x44102, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x2, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4090}, 0x0)
ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x9)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f00000006c0)={0x1, 0x0, [0x0]})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700))
ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x800)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x1b5400, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400}, 0x4000010)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x58, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3a}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x6008000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
perf_event_open$cgroup(&(0x7f0000000b00)={0x2, 0x80, 0x4, 0x6, 0xbb, 0x5, 0x0, 0xd47, 0xc0, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x7ff}, 0x0, 0x7, 0x3, 0x4, 0x0, 0xdff, 0x6, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3)

12:05:54 executing program 5:
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
r0 = fork()
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0)
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000280))
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x24000050)
recvmsg$unix(r1, &(0x7f0000001980)={&(0x7f00000003c0), 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000540)=""/158, 0x9e}, {&(0x7f0000000600)=""/128, 0x80}, {&(0x7f0000000680)=""/149, 0x95}, {&(0x7f0000000740)=""/40, 0x28}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/17, 0x11}], 0x7, &(0x7f0000001840)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r4=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r5=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [<r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}], 0x138}, 0x2)
sched_rr_get_interval(r4, &(0x7f00000019c0))
sched_rr_get_interval(r5, &(0x7f0000001a00))
r8 = openat$cgroup_type(r6, &(0x7f0000001a40), 0x2, 0x0)
fstat(r8, &(0x7f0000001a80))
clock_gettime(0x0, &(0x7f0000001bc0)={<r9=>0x0, <r10=>0x0})
pselect6(0x40, &(0x7f0000001b00)={0xffffffffffff0000, 0x2, 0x0, 0x0, 0x101, 0x7fffffff, 0x3, 0x3f}, &(0x7f0000001b40)={0x6, 0x7, 0x401, 0xfc8a, 0x0, 0xc23d, 0x0, 0x200}, &(0x7f0000001b80)={0x3f, 0x7, 0x2, 0x8, 0x7, 0x9, 0x2}, &(0x7f0000001c00)={r9, r10+60000000}, &(0x7f0000001c80)={&(0x7f0000001c40)={[0x401]}, 0x8})
sched_rr_get_interval(r7, &(0x7f0000001cc0))
ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000001d00)={0x1, 0x1, {0xf, 0x13, 0xc, 0x16, 0x6, 0xe859, 0x5, 0xb5, 0x1}})
clock_gettime(0x6, &(0x7f0000001d40))
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001dc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x3c, r12, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x68, 0x0, 0xb, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ns/user\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0xc, 0x1, 'ns/user\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, ']\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, '*\'^\xe3\x05[+\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000814)

12:05:54 executing program 7:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x72f5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x48}, 0x1, 0x0, 0x0, 0x64004004}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008044)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0xe654637ba5e7a1f3, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0xc081)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r5, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x78d}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r8=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r6, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, r7, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x41)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000009c0)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r7, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, r5, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010)

[   96.052062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   96.053767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   96.054899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   96.061191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   96.063810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   96.064875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   96.066314] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   96.067779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   96.069448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   96.070769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   96.075137] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   96.076587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   96.097068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   96.100066] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   96.103183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   96.106068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   96.107669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   96.109636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   96.111391] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   96.113639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.120719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   96.120828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   96.129813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   96.131622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   96.131949] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   96.136068] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   96.137630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   96.138030] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   96.142299] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   96.153982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   96.182237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   96.184654] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   96.191723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   96.202406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   96.204556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   96.207700] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   96.218455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   96.220318] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   96.225129] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   96.234038] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   96.237220] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   96.238630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   96.251244] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   96.260945] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   96.268676] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   96.270656] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   96.275956] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   96.277833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   98.131910] Bluetooth: hci1: command tx timeout
[   98.131914] Bluetooth: hci0: command tx timeout
[   98.195980] Bluetooth: hci4: command tx timeout
[   98.197794] Bluetooth: hci2: command tx timeout
[   98.259515] Bluetooth: hci3: command tx timeout
[   98.324506] Bluetooth: hci6: command tx timeout
[   98.387561] Bluetooth: hci7: command tx timeout
[   98.389318] Bluetooth: hci5: command tx timeout
[  100.179675] Bluetooth: hci1: command tx timeout
[  100.180973] Bluetooth: hci0: command tx timeout
[  100.245489] Bluetooth: hci2: command tx timeout
[  100.245589] Bluetooth: hci4: command tx timeout
[  100.308506] Bluetooth: hci3: command tx timeout
[  100.372498] Bluetooth: hci6: command tx timeout
[  100.435533] Bluetooth: hci5: command tx timeout
[  100.435558] Bluetooth: hci7: command tx timeout
[  102.229482] Bluetooth: hci0: command tx timeout
[  102.229521] Bluetooth: hci1: command tx timeout
[  102.297486] Bluetooth: hci4: command tx timeout
[  102.297585] Bluetooth: hci2: command tx timeout
[  102.355561] Bluetooth: hci3: command tx timeout
[  102.420513] Bluetooth: hci6: command tx timeout
[  102.487595] Bluetooth: hci7: command tx timeout
[  102.487695] Bluetooth: hci5: command tx timeout
[  104.275574] Bluetooth: hci0: command tx timeout
[  104.275682] Bluetooth: hci1: command tx timeout
[  104.339538] Bluetooth: hci2: command tx timeout
[  104.339576] Bluetooth: hci4: command tx timeout
[  104.405124] Bluetooth: hci3: command tx timeout
[  104.467506] Bluetooth: hci6: command tx timeout
[  104.532554] Bluetooth: hci5: command tx timeout
[  104.532835] Bluetooth: hci7: command tx timeout
[  158.690273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  158.691265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  158.691780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  158.693893] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  158.699087] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  158.701608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  158.810682] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  158.812325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  158.813007] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  158.819349] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  158.821842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  158.822828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  158.905884] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  158.908541] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  158.911235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  158.913294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  158.914841] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  158.915296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  158.997153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.003857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.006495] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.027270] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  159.037672] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  159.039311] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  159.041297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.054695] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.055207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.069360] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  159.095343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  159.096537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  159.106635] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  159.107949] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  159.125645] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  159.132672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  159.143993] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  159.145866] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  159.150386] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  159.153608] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  159.155024] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  159.158857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  159.162966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  159.165010] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  159.194725] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  159.199912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  159.211552] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  159.218132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  159.228795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  159.231710] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  160.724494] Bluetooth: hci0: command tx timeout
[  160.851673] Bluetooth: hci1: command tx timeout
[  160.980512] Bluetooth: hci2: command tx timeout
[  161.235525] Bluetooth: hci3: command tx timeout
[  161.240791] Bluetooth: hci5: command tx timeout
[  161.301464] Bluetooth: hci4: command tx timeout
[  161.365528] Bluetooth: hci7: command tx timeout
[  162.004461] Bluetooth: hci6: command tx timeout
[  162.775228] Bluetooth: hci0: command tx timeout
[  162.901058] Bluetooth: hci1: command tx timeout
[  163.032259] Bluetooth: hci2: command tx timeout
[  163.285491] Bluetooth: hci3: command tx timeout
[  163.285603] Bluetooth: hci5: command tx timeout
[  163.348671] Bluetooth: hci4: command tx timeout
[  163.416981] Bluetooth: hci7: command tx timeout
[  164.053481] Bluetooth: hci6: command tx timeout
[  164.820713] Bluetooth: hci0: command tx timeout
[  164.948500] Bluetooth: hci1: command tx timeout
[  165.078477] Bluetooth: hci2: command tx timeout
[  165.401450] Bluetooth: hci5: command tx timeout
[  165.401553] Bluetooth: hci3: command tx timeout
[  165.401651] Bluetooth: hci4: command tx timeout
[  165.484216] Bluetooth: hci7: command tx timeout
[  166.099620] Bluetooth: hci6: command tx timeout
[  166.871613] Bluetooth: hci0: command tx timeout
[  166.996504] Bluetooth: hci1: command tx timeout
[  167.127894] Bluetooth: hci2: command tx timeout
[  167.444579] Bluetooth: hci4: command tx timeout
[  167.445215] Bluetooth: hci3: command tx timeout
[  167.445324] Bluetooth: hci5: command tx timeout
[  167.508507] Bluetooth: hci7: command tx timeout
[  168.148541] Bluetooth: hci6: command tx timeout
[  221.077818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.079110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.080643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.103056] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.104173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.104545] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.106982] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.108886] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.110011] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.110984] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.117839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.118875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.285427] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.286818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.315669] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.317123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.317657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.319723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.322716] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.323179] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.340999] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.341777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.342215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.344315] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  221.345516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  221.346583] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  221.377509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.480419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  221.510237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.514516] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  221.516992] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.517835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  221.528702] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  221.542121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.544690] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.551484] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.595301] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  221.604572] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  221.609891] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  221.610089] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  221.611232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  221.611726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  221.623039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  221.628587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  221.642136] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  221.745525] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.747355] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  221.748296] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  223.188786] Bluetooth: hci0: command tx timeout
[  223.189778] Bluetooth: hci1: command tx timeout
[  223.379566] Bluetooth: hci4: command tx timeout
[  223.507521] Bluetooth: hci3: command tx timeout
[  223.636837] Bluetooth: hci2: command tx timeout
[  223.763859] Bluetooth: hci5: command tx timeout
[  223.764265] Bluetooth: hci7: command tx timeout
[  223.956571] Bluetooth: hci6: command tx timeout
[  225.238463] Bluetooth: hci1: command tx timeout
[  225.238583] Bluetooth: hci0: command tx timeout
[  225.427504] Bluetooth: hci4: command tx timeout
[  225.556570] Bluetooth: hci3: command tx timeout
[  225.686429] Bluetooth: hci2: command tx timeout
[  225.813526] Bluetooth: hci5: command tx timeout
[  225.813646] Bluetooth: hci7: command tx timeout
[  226.004100] Bluetooth: hci6: command tx timeout
[  227.284641] Bluetooth: hci0: command tx timeout
[  227.284889] Bluetooth: hci1: command tx timeout
[  227.476545] Bluetooth: hci4: command tx timeout
[  227.604588] Bluetooth: hci3: command tx timeout
[  227.731467] Bluetooth: hci2: command tx timeout
[  227.860603] Bluetooth: hci5: command tx timeout
[  227.860814] Bluetooth: hci7: command tx timeout
[  228.052785] Bluetooth: hci6: command tx timeout
[  229.331514] Bluetooth: hci0: command tx timeout
[  229.331641] Bluetooth: hci1: command tx timeout
[  229.524466] Bluetooth: hci4: command tx timeout
[  229.652659] Bluetooth: hci3: command tx timeout
[  229.780522] Bluetooth: hci2: command tx timeout
[  229.912650] Bluetooth: hci5: command tx timeout
[  229.912766] Bluetooth: hci7: command tx timeout
[  230.101428] Bluetooth: hci6: command tx timeout
[  283.502322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  283.509123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  283.513345] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  283.523845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  283.532307] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  283.533861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  283.576014] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  283.577693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  283.579661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  283.582930] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  283.636605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  283.638177] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  283.639408] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  283.642646] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  283.645072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  283.652713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  283.655712] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  283.658041] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  283.698309] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  283.719619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  283.752606] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  283.758740] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  283.764125] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  283.765853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  283.767987] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  283.779610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  283.783635] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  283.784830] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  283.785493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  283.786223] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  283.786546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  283.795680] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  283.796008] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  283.827191] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  283.842912] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  283.854209] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  283.885768] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  283.886030] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  283.886870] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  283.890544] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  283.905147] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  283.907022] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  283.908221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  283.918616] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  283.920158] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  283.921261] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  283.931509] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  283.932663] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  285.587501] Bluetooth: hci0: command tx timeout
[  285.716527] Bluetooth: hci1: command tx timeout
[  285.716561] Bluetooth: hci2: command tx timeout
[  285.843469] Bluetooth: hci5: command tx timeout
[  285.909489] Bluetooth: hci3: command tx timeout
[  285.971476] Bluetooth: hci6: command tx timeout
[  286.035544] Bluetooth: hci4: command tx timeout
[  286.036653] Bluetooth: hci7: command tx timeout
[  287.635460] Bluetooth: hci0: command tx timeout
[  287.763589] Bluetooth: hci2: command tx timeout
[  287.763609] Bluetooth: hci1: command tx timeout
[  287.891550] Bluetooth: hci5: command tx timeout
[  287.955592] Bluetooth: hci3: command tx timeout
[  288.021581] Bluetooth: hci6: command tx timeout
[  288.084427] Bluetooth: hci4: command tx timeout
[  288.084450] Bluetooth: hci7: command tx timeout
[  289.684679] Bluetooth: hci0: command tx timeout
[  289.811547] Bluetooth: hci1: command tx timeout
[  289.811656] Bluetooth: hci2: command tx timeout
[  289.940491] Bluetooth: hci5: command tx timeout
[  290.003635] Bluetooth: hci3: command tx timeout
[  290.067509] Bluetooth: hci6: command tx timeout
[  290.131475] Bluetooth: hci7: command tx timeout
[  290.131489] Bluetooth: hci4: command tx timeout
[  291.732502] Bluetooth: hci0: command tx timeout
[  291.859550] Bluetooth: hci2: command tx timeout
[  291.859663] Bluetooth: hci1: command tx timeout
[  291.987464] Bluetooth: hci5: command tx timeout
[  292.051459] Bluetooth: hci3: command tx timeout
[  292.115572] Bluetooth: hci6: command tx timeout
[  292.179542] Bluetooth: hci4: command tx timeout
[  292.179643] Bluetooth: hci7: command tx timeout
[  323.392991] hrtimer: interrupt took 6188368 ns
[  346.048115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  346.054238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  346.057020] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  346.065539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  346.068111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  346.069078] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  346.097964] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  346.107266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  346.108295] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  346.110281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  346.111130] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  346.111606] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  346.130650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  346.138931] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  346.141016] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  346.149966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  346.153164] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  346.158477] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  346.203781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.209083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.211639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.219374] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.221002] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.222301] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  346.289303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  346.292670] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  346.303579] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  346.355920] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  346.358934] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  346.363480] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  346.366135] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.366633] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  346.369598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.371120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  346.374223] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.374503] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  346.405873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.408223] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  346.422224] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  346.422245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  346.424388] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.425119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  346.444976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  346.447653] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  346.448869] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  346.451986] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  346.454372] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  346.456817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  348.115481] Bluetooth: hci0: command tx timeout
[  348.180454] Bluetooth: hci1: command tx timeout
[  348.244419] Bluetooth: hci3: command tx timeout
[  348.244439] Bluetooth: hci2: command tx timeout
[  348.435829] Bluetooth: hci4: command tx timeout
[  348.499622] Bluetooth: hci5: command tx timeout
[  348.571443] Bluetooth: hci6: command tx timeout
[  348.571853] Bluetooth: hci7: command tx timeout
[  350.163477] Bluetooth: hci0: command tx timeout
[  350.227635] Bluetooth: hci1: command tx timeout
[  350.291540] Bluetooth: hci2: command tx timeout
[  350.293425] Bluetooth: hci3: command tx timeout
[  350.525892] Bluetooth: hci4: command tx timeout
[  350.555402] Bluetooth: hci5: command tx timeout
[  350.647444] Bluetooth: hci7: command tx timeout
[  350.647559] Bluetooth: hci6: command tx timeout
[  352.211538] Bluetooth: hci0: command tx timeout
[  352.275490] Bluetooth: hci1: command tx timeout
[  352.339471] Bluetooth: hci2: command tx timeout
[  352.340562] Bluetooth: hci3: command tx timeout
[  352.531478] Bluetooth: hci4: command tx timeout
[  352.596005] Bluetooth: hci5: command tx timeout
[  352.659453] Bluetooth: hci6: command tx timeout
[  352.659556] Bluetooth: hci7: command tx timeout
[  354.260490] Bluetooth: hci0: command tx timeout
[  354.324479] Bluetooth: hci1: command tx timeout
[  354.388528] Bluetooth: hci3: command tx timeout
[  354.388653] Bluetooth: hci2: command tx timeout
[  354.580487] Bluetooth: hci4: command tx timeout
[  354.644722] Bluetooth: hci5: command tx timeout
[  354.709435] Bluetooth: hci7: command tx timeout
[  354.709467] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
12:11:02  Registers:
info registers vcpu 0
RAX=ffff888034bc0001 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888034bbfc01
RSI=ffff888034bbfc00 RDI=ffff888034bbf818 RBP=ffff888034bbf860 RSP=ffff888034bbf798
R8 =0000000000000001 R9 =ffff888034bbf848 R10=000000000003ab8d R11=0000000000026a83
R12=ffff888034bbf868 R13=ffff888034bbf850 R14=ffff888034bbfc00 R15=ffff888034bbf808
RIP=ffffffff81349ab2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f36ba4806f4 CR3=000000003304a000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00007f36ba48f47000007f36ba48ef20
XMM02=00000000000000000000000000000000 XMM03=756e20796d6d756420736e6f6974706f
XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=73253d656d616e6c6165722073253d73 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000001 RBX=ffff888013e35dda RCX=1ffffffff0fe234c RDX=dffffc0000000000
RSI=0000000000000040 RDI=ffffffff87f11a60 RBP=ffff888013e35db8 RSP=ffff888029697398
R8 =0000000000000000 R9 =fffffbfff0fe13e6 R10=ffffffff87f09f37 R11=0000000000000001
R12=ffff888013e35340 R13=ffffffff85cece00 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff814fdbf2 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0d00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff1fddc9368 CR3=0000000029256000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78
XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000