Warning: Permanently added '[localhost]:22602' (ECDSA) to the list of known hosts. 2025/01/23 12:51:40 fuzzer started 2025/01/23 12:51:40 dialing manager at localhost:38529 syzkaller login: [ 80.731510] cgroup: Unknown subsys name 'net' [ 80.945221] cgroup: Unknown subsys name 'cpuset' [ 81.027851] cgroup: Unknown subsys name 'rlimit' [ 86.490842] kmemleak: 1 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 12:52:06 syscalls: 205 2025/01/23 12:52:06 code coverage: enabled 2025/01/23 12:52:06 comparison tracing: enabled 2025/01/23 12:52:06 extra coverage: enabled 2025/01/23 12:52:06 setuid sandbox: enabled 2025/01/23 12:52:06 namespace sandbox: enabled 2025/01/23 12:52:06 Android sandbox: enabled 2025/01/23 12:52:06 fault injection: enabled 2025/01/23 12:52:06 leak checking: enabled 2025/01/23 12:52:06 net packet injection: enabled 2025/01/23 12:52:06 net device setup: enabled 2025/01/23 12:52:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 12:52:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 12:52:06 USB emulation: enabled 2025/01/23 12:52:06 hci packet injection: enabled 2025/01/23 12:52:06 wifi device emulation: enabled 2025/01/23 12:52:06 802.15.4 emulation: enabled 2025/01/23 12:52:06 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 12:52:08 starting 8 fuzzer processes 12:52:08 executing program 0: r0 = io_uring_setup(0x3beb, &(0x7f0000000000)={0x0, 0x661b, 0x1, 0x3, 0x346}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) io_uring_setup(0x1, &(0x7f00000000c0)={0x0, 0x827c, 0x0, 0x2, 0x172, 0x0, r1}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1080, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend}, {@posixacl}, {@access_client}, {@privport}, {@version_u}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_eq}]}}) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000002c0)={0x7fff, 0x101}) write$snapshot(r1, &(0x7f0000000300)="b32851526d09e1b3a6aa629a28b2c5b1638393c1c2dcf81aab9e9840f84a99e612d97ec6a070023a2a57a8bc7b6862ebaad9bf4109a88afdc9bb6fb0996e8f7d15db4317aff6e9b8b10661710cfb8e2f28eb767f6e972db5cdcf4d951cd430a7d47aa1caa8b3b0b74aa2eb9ca834c4bb1e860b69ae4b8e8abd7c6a420690126f051f8bb8240227a00b25da6b6a9b37dd691b9c82c74bd140e4cd", 0x9a) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f00000003c0)={0x5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000440)={@private0={0xfc, 0x0, '\x00', 0x1}, r2}, 0x14) r3 = io_uring_setup(0x565f, &(0x7f0000000480)={0x0, 0x5441, 0x1, 0x1, 0x186, 0x0, r1}) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$SNAPSHOT_UNFREEZE(r1, 0x3302) r4 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000500), 0x200000, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000540)=0x1, 0x4) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000580)={@mcast2, 0x0}, &(0x7f00000005c0)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000600)={@remote, r5}, 0x14) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000640), 0x840, 0x0) write$snapshot(r6, &(0x7f0000000680)="dd2fc5", 0x3) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xac, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r1}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r4}, {0x8, 0x1, r1}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xa4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}]}, 0xac}}, 0x10) 12:52:08 executing program 2: socketpair(0x8, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x2, 0x40440) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, 0xffffffffffffffff, 0x40004) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r4) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r6) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1e4, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x84, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "2c9923e8f9f71688f354760942db2b6716bd3ba5b114d07edab0f982aa3d7132"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6138662cd0e3c1d31b48869b5acdba0dedf97a86843d81758ae7e119d6bfb5b5"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "789b76d71d50e1dd73fe149a351001696f945f152e762bc4c401548288b862c1"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "07720b5c522b75fce6f56fd5b4da4958"}]}, @NL802154_ATTR_SEC_KEY={0x138, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5f}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x88}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a061212ec91125e6ac8e542bf9d52a57"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "d273200fd32460b2e26e330aa1efacbeebe915686c4b31af639d62c49188a2c7"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "cfcfd6ece296170d4ccb8c5f1686d773055a05516e1a25edd94d29694aa21487"}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x20}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0xc865) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r9, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000018}, 0x8000) sendmsg$NET_DM_CMD_START(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x340048c1}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000940)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r8, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4085}, 0x20000011) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000ac0)={{0xffffffffffffffff, 0x2, 0xca, 0x3, 0x4}, 0xffffbece, 0x8001, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xfffffffffffffff8, 0x3, 0x7fffffff}) 12:52:08 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) semget(0x3, 0x1, 0x425) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r1, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x404d000) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x280000, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x37}}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '\x86:]+\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000042}, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x3, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xc}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r7, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r3) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x3c, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd4a3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20001004) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r8, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat$cgroup_pressure(r0, &(0x7f00000008c0)='memory.pressure\x00', 0x2, 0x0) 12:52:08 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:clock_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10a}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xd}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r3, 0x10, 0x70bd27, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000000) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000680)={&(0x7f0000000580), 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1a}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x18}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x4000010) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000007c0)={'wpan0\x00'}) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000840), r5) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x44080}, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r5) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000b80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x104, r7, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x94, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3200000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1ff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x35c}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x30040801}, 0x20000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r8, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20042085}, 0x8044) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x5c, r7, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x40}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 108.641889] audit: type=1400 audit(1737636729.004:7): avc: denied { execmem } for pid=278 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 12:52:08 executing program 4: sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "db9a52d19aa84473686d6c617f6c735f"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "57801b7dd25659f07dfc84e8fb12f428"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "89f97b0f5641cdf844c68237b809663b"}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20008411) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xff}]}, 0x34}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0xa02, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0xc014) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) sendmsg$NL80211_CMD_START_NAN(r6, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x77}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5959142062bbfb74}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8c}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4040) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x4c, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x860}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9d0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x24000014) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000840), 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x5c, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000014) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x40, r10, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 12:52:09 executing program 5: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xa1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x815}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x4, 0x25dfdbfb, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000810}, 0x4008000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xcd}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0xc004) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x208, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x44080) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1004) sendmsg$IEEE802154_LLSEC_LIST_KEY(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x4c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x0, 0x300, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x48, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4008000) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1208805c}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x416bd28f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xedc0196}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7dd61182}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b7e7301}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'tunl0\x00', &(0x7f0000000e80)={'syztnl0\x00', r0, 0x8000, 0x40, 0x8, 0x916, {{0x16, 0x4, 0x3, 0x7, 0x58, 0x64, 0x0, 0x81, 0x2f, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x36, 0x1, [{0x1, 0x2}, {0x5, 0x7, "0178691da6"}, {0x0, 0x8, "cfda1a741787"}, {0x7, 0x10, "0aa1a2d5640acd3786b90e70af62"}, {0x5, 0xf, "914f94afb0cfa0b74af18b2d92"}]}, @ssrr={0x89, 0x7, 0x89, [@empty]}, @lsrr={0x83, 0x7, 0x25, [@private=0xa010100]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000001240)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000000f80)={0x278, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x6, 0x0, 0x8, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x80}, 0x1) 12:52:09 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x27c, 0x0, 0x2, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_SEC_KEY={0x164, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7a01555169145696e3da90d07e9dd963"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4d}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6b33be04de442a7551307a316940ba11"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a89cbe85976d4dbcc4556ad341d9919c6ba012c7b79fae550d30fed0dbac6c11"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9b}, @NL802154_KEY_ATTR_ID={0x8c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff81}]}]}, @NL802154_ATTR_SEC_KEY={0x54, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "109ec911c3ca5a380e0ddc5984ebbf58"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "90a5cc13f86ec4b0bba31727c1cd09ab9d9c4dbbfdd42e768b12a6a6282e032e"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x50, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}, @NL802154_ATTR_SEC_KEY={0x20, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_KEY={0x30, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b510f222b7e92adc2cbdabfa83af95a7609127f57f9eb9a47218f7ba4fa4aec4"}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x40004) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008000}, 0x54) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r3, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1c}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x5) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x8045}, 0x800) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x5b}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x64840}, 0x40010) socketpair(0x28, 0x1, 0x7fff, &(0x7f0000000ac0)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000cc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b40)={0x13c, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x800, 0x72}}}}, [@NL80211_ATTR_BEACON_TAIL={0x11c, 0xf, [@fast_bss_trans={0x37, 0x103, {0x7b, 0x6, "e872036c9ddfc3bc9d3bae99572a40b2", "39df1de9bca9d1887be0c5205253bbd5f7db0c347ce62e99d55152e9d5d6a65b", "a22fe45f72f9c8250bf39ee9d801127ef70acc1fb77c2a014b5e7a43c7d8b31e", [{0x3, 0x27, "9127d1592cafe11f820c3f0d78a37deeed112cff12ff79c358c13b139137e454460fc350e05965"}, {0x2, 0x1f, "b8f1a3cefffe557bedfa7d2b9ad88587fe2c2ba27f3de5868d21957ec5d103"}, {0x3, 0x20, "c101ec5065ec374f7e9087ba1c8e2063774c419a1155b02cc84be2eedddd8aa8"}, {0x1, 0x16, "f9d7875da5d55fe72a7e26607ffff758202b9ec9249b"}, {0x4, 0x10, "9b594029c1531c1a0635b601aa5de6fe"}, {0x4, 0x19, "3f754ba6aecc111abac11680eea600ede4dfc6fc236fea1b5e"}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @supported_rates, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0x99, 0xff}}, @cf={0x4, 0x6, {0x1, 0x0, 0xff, 0x800}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x30040000}, 0x44001) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, 0x0, 0x1, 0x70bd28, 0x3, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r9, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x50, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x5) 12:52:09 executing program 7: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4080}, 0x28008010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xab}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2c1c}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x34, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000780)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x7c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1f}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40880}, 0x40000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r4) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r7, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a40), r1) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x74}, 0x1, 0x0, 0x0, 0x40060}, 0x4040) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004004}, 0x40000) [ 110.033075] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 110.039390] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.040790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 110.043943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 110.048442] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.050263] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.053672] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 110.055999] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 110.057586] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.059185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.064623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.073259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 110.112414] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 110.123859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 110.125519] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.128056] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.128752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 110.133861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.137023] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.137370] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 110.138421] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 110.138915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 110.143508] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.145433] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.205189] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.214050] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.222653] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.241259] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.246918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.248077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.270413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 110.275729] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 110.277034] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 110.279363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 110.286306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 110.289254] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 110.294522] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 110.297524] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 110.298883] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.345446] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 110.345793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 110.364607] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 110.369904] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 110.371713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 110.378281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 110.402907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 110.403914] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 110.406434] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 112.111049] Bluetooth: hci1: command tx timeout [ 112.174281] Bluetooth: hci2: command tx timeout [ 112.174593] Bluetooth: hci3: command tx timeout [ 112.174761] Bluetooth: hci0: command tx timeout [ 112.367199] Bluetooth: hci4: command tx timeout [ 112.367626] Bluetooth: hci7: command tx timeout [ 112.430194] Bluetooth: hci5: command tx timeout [ 112.494301] Bluetooth: hci6: command tx timeout [ 114.162200] Bluetooth: hci1: command tx timeout [ 114.224210] Bluetooth: hci2: command tx timeout [ 114.224328] Bluetooth: hci0: command tx timeout [ 114.224441] Bluetooth: hci3: command tx timeout [ 114.432164] Bluetooth: hci7: command tx timeout [ 114.432825] Bluetooth: hci4: command tx timeout [ 114.480142] Bluetooth: hci5: command tx timeout [ 114.542182] Bluetooth: hci6: command tx timeout [ 116.207460] Bluetooth: hci1: command tx timeout [ 116.271284] Bluetooth: hci3: command tx timeout [ 116.271399] Bluetooth: hci0: command tx timeout [ 116.271462] Bluetooth: hci2: command tx timeout [ 116.463231] Bluetooth: hci4: command tx timeout [ 116.463259] Bluetooth: hci7: command tx timeout [ 116.527185] Bluetooth: hci5: command tx timeout [ 116.592193] Bluetooth: hci6: command tx timeout [ 118.254212] Bluetooth: hci1: command tx timeout [ 118.334238] Bluetooth: hci2: command tx timeout [ 118.334366] Bluetooth: hci0: command tx timeout [ 118.334424] Bluetooth: hci3: command tx timeout [ 118.528178] Bluetooth: hci4: command tx timeout [ 118.528295] Bluetooth: hci7: command tx timeout [ 118.581269] Bluetooth: hci5: command tx timeout [ 118.646156] Bluetooth: hci6: command tx timeout [ 170.217399] syz-executor.3 (288) used greatest stack depth: 23712 bytes left [ 172.845375] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.851921] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.853674] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 172.861031] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.862808] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.863555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 172.864924] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 172.865293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 172.867403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 172.871707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 172.873860] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 172.875288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 172.887173] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 172.892630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 172.893824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 172.896318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.896628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.898539] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 172.900159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 172.903501] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 172.904910] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 172.908486] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 172.911251] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 172.924676] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 172.930013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.931388] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.937346] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.939948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.948633] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 172.951223] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.038427] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 173.043327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.065734] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 173.067409] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 173.071739] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 173.073660] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 173.075116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 173.087284] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 173.089342] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 173.090478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 173.092178] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.093512] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 173.096395] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 173.099234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 173.100539] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 173.102055] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 173.103536] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 173.104737] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.958196] Bluetooth: hci3: command tx timeout [ 174.958628] Bluetooth: hci1: command tx timeout [ 175.022474] Bluetooth: hci2: command tx timeout [ 175.024510] Bluetooth: hci0: command tx timeout [ 175.036282] Bluetooth: hci4: command tx timeout [ 175.094190] Bluetooth: hci6: command tx timeout [ 175.150396] Bluetooth: hci5: command tx timeout [ 175.287151] Bluetooth: hci7: command tx timeout [ 177.018009] Bluetooth: hci3: command tx timeout [ 177.018163] Bluetooth: hci1: command tx timeout [ 177.112930] Bluetooth: hci4: command tx timeout [ 177.114219] Bluetooth: hci2: command tx timeout [ 177.114282] Bluetooth: hci0: command tx timeout [ 177.134436] Bluetooth: hci6: command tx timeout [ 177.209771] Bluetooth: hci5: command tx timeout [ 177.330150] Bluetooth: hci7: command tx timeout [ 179.062238] Bluetooth: hci1: command tx timeout [ 179.063547] Bluetooth: hci3: command tx timeout [ 179.125193] Bluetooth: hci0: command tx timeout [ 179.125314] Bluetooth: hci2: command tx timeout [ 179.126867] Bluetooth: hci4: command tx timeout [ 179.194239] Bluetooth: hci6: command tx timeout [ 179.279233] Bluetooth: hci5: command tx timeout [ 179.375154] Bluetooth: hci7: command tx timeout [ 181.106276] Bluetooth: hci3: command tx timeout [ 181.107707] Bluetooth: hci1: command tx timeout [ 181.177125] Bluetooth: hci2: command tx timeout [ 181.177212] Bluetooth: hci4: command tx timeout [ 181.177295] Bluetooth: hci0: command tx timeout [ 181.230212] Bluetooth: hci6: command tx timeout [ 181.294401] Bluetooth: hci5: command tx timeout [ 181.423349] Bluetooth: hci7: command tx timeout [ 232.778631] hrtimer: interrupt took 3263395 ns [ 235.095634] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.140587] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.169907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.183150] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.185131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 235.185598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.260962] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.272517] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.273564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.282915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.291371] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.293373] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.511625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.512390] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.512849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.534019] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.536377] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 235.537683] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.565412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 235.569324] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 235.570429] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 235.592939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.595516] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.600097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.601677] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.604664] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.606432] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.607833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.611483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 235.612451] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 235.612992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 235.634322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.634855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.637270] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.638248] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.638703] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.675600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.682854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.688378] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.698296] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.702684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.708322] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.720261] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.734946] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.739260] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.739722] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.746297] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.746885] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 237.230213] Bluetooth: hci0: command tx timeout [ 237.358201] Bluetooth: hci1: command tx timeout [ 237.615124] Bluetooth: hci2: command tx timeout [ 237.679247] Bluetooth: hci4: command tx timeout [ 237.679569] Bluetooth: hci3: command tx timeout [ 237.745124] Bluetooth: hci5: command tx timeout [ 237.806318] Bluetooth: hci7: command tx timeout [ 237.871507] Bluetooth: hci6: command tx timeout [ 239.278754] Bluetooth: hci0: command tx timeout [ 239.427345] Bluetooth: hci1: command tx timeout [ 239.684129] Bluetooth: hci2: command tx timeout [ 239.740019] Bluetooth: hci3: command tx timeout [ 239.740159] Bluetooth: hci4: command tx timeout [ 239.795968] Bluetooth: hci5: command tx timeout [ 239.854186] Bluetooth: hci7: command tx timeout [ 239.925778] Bluetooth: hci6: command tx timeout [ 241.361765] Bluetooth: hci0: command tx timeout [ 241.455510] Bluetooth: hci1: command tx timeout [ 241.712357] Bluetooth: hci2: command tx timeout [ 241.775293] Bluetooth: hci4: command tx timeout [ 241.775477] Bluetooth: hci3: command tx timeout [ 241.839222] Bluetooth: hci5: command tx timeout [ 241.902129] Bluetooth: hci7: command tx timeout [ 241.966158] Bluetooth: hci6: command tx timeout [ 243.374343] Bluetooth: hci0: command tx timeout [ 243.515572] Bluetooth: hci1: command tx timeout [ 243.776611] Bluetooth: hci2: command tx timeout [ 243.835959] Bluetooth: hci4: command tx timeout [ 243.836146] Bluetooth: hci3: command tx timeout [ 243.912132] Bluetooth: hci5: command tx timeout [ 243.953113] Bluetooth: hci7: command tx timeout [ 244.033113] Bluetooth: hci6: command tx timeout [ 297.498442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.501437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.502662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.505256] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.508825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 297.514295] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.658909] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 297.682686] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.683976] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.685367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.691956] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 297.695638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 297.708294] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.716186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.716907] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.722846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.724595] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.726352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.878615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.882304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.883832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.906689] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.918119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 297.927900] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 297.928989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.936937] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.940277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.951361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.976157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.979090] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.980259] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.981367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.988690] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.993768] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.995483] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.996809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.032919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 298.051228] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 298.059984] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 298.064313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 298.089380] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 298.094436] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 298.096639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 298.104347] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 298.128572] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 298.132940] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 298.140799] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 298.232691] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 299.581457] Bluetooth: hci0: command tx timeout [ 299.758212] Bluetooth: hci1: command tx timeout [ 299.758623] Bluetooth: hci2: command tx timeout [ 300.014217] Bluetooth: hci3: command tx timeout [ 300.079630] Bluetooth: hci4: command tx timeout [ 300.079637] Bluetooth: hci5: command tx timeout [ 300.206323] Bluetooth: hci6: command tx timeout [ 300.350079] Bluetooth: hci7: command tx timeout [ 301.614172] Bluetooth: hci0: command tx timeout [ 301.806175] Bluetooth: hci2: command tx timeout [ 301.806213] Bluetooth: hci1: command tx timeout [ 302.063353] Bluetooth: hci3: command tx timeout [ 302.127246] Bluetooth: hci5: command tx timeout [ 302.127347] Bluetooth: hci4: command tx timeout [ 302.255317] Bluetooth: hci6: command tx timeout [ 302.383216] Bluetooth: hci7: command tx timeout [ 303.681324] Bluetooth: hci0: command tx timeout [ 303.858109] Bluetooth: hci1: command tx timeout [ 303.862158] Bluetooth: hci2: command tx timeout [ 304.139091] Bluetooth: hci3: command tx timeout [ 304.174162] Bluetooth: hci4: command tx timeout [ 304.174251] Bluetooth: hci5: command tx timeout [ 304.331022] Bluetooth: hci6: command tx timeout [ 304.451057] Bluetooth: hci7: command tx timeout [ 305.710847] Bluetooth: hci0: command tx timeout [ 305.902168] Bluetooth: hci2: command tx timeout [ 305.902183] Bluetooth: hci1: command tx timeout [ 306.160227] Bluetooth: hci3: command tx timeout [ 306.222165] Bluetooth: hci5: command tx timeout [ 306.222250] Bluetooth: hci4: command tx timeout [ 306.351146] Bluetooth: hci6: command tx timeout [ 306.480149] Bluetooth: hci7: command tx timeout [ 359.986992] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.988660] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.989764] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.992080] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.993768] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 359.995008] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 360.313735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.320422] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.323572] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.331939] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 360.334567] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 360.335719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 360.513643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.514548] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 360.519445] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.520472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.522544] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 360.527863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.530473] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 360.531650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.532343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 360.558567] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 360.560582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 360.561776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 360.585911] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.589092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.589543] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.592852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.595970] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.597748] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.603465] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 360.612391] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.630735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.632232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 360.633542] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 360.644986] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.647751] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 360.648004] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.650511] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.651492] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.662887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.667175] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.693907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.711546] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 360.712895] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.713965] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.716095] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 360.717547] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 362.095851] Bluetooth: hci0: command tx timeout [ 362.416589] Bluetooth: hci1: command tx timeout [ 362.606189] Bluetooth: hci3: command tx timeout [ 362.606615] Bluetooth: hci2: command tx timeout [ 362.671502] Bluetooth: hci4: command tx timeout [ 362.734343] Bluetooth: hci5: command tx timeout [ 362.800407] Bluetooth: hci6: command tx timeout [ 362.801927] Bluetooth: hci7: command tx timeout [ 364.142119] Bluetooth: hci0: command tx timeout [ 364.463099] Bluetooth: hci1: command tx timeout [ 364.654259] Bluetooth: hci2: command tx timeout [ 364.654460] Bluetooth: hci3: command tx timeout [ 364.719205] Bluetooth: hci4: command tx timeout [ 364.783246] Bluetooth: hci5: command tx timeout [ 364.847294] Bluetooth: hci7: command tx timeout [ 364.847575] Bluetooth: hci6: command tx timeout [ 366.191723] Bluetooth: hci0: command tx timeout [ 366.514118] Bluetooth: hci1: command tx timeout [ 366.702334] Bluetooth: hci2: command tx timeout [ 366.703393] Bluetooth: hci3: command tx timeout [ 366.768068] Bluetooth: hci4: command tx timeout [ 366.831123] Bluetooth: hci5: command tx timeout [ 366.895133] Bluetooth: hci7: command tx timeout [ 366.895243] Bluetooth: hci6: command tx timeout [ 368.239141] Bluetooth: hci0: command tx timeout [ 368.560130] Bluetooth: hci1: command tx timeout [ 368.751127] Bluetooth: hci3: command tx timeout [ 368.751248] Bluetooth: hci2: command tx timeout [ 368.814344] Bluetooth: hci4: command tx timeout [ 368.879133] Bluetooth: hci5: command tx timeout [ 368.942319] Bluetooth: hci6: command tx timeout [ 368.942435] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 12:57:09 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110039c3fac RCX=ffffffff81502d27 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff864057d0 RBP=0000000000000001 RSP=ffff88801ce1fd40 R8 =0000000000000001 R9 =0000000000000000 R10=000000000003a64c R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=ffff88801505a0d0 R15=0000000000000000 RIP=ffffffff81abd108 RFL=00000256 [---ZAP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f3bbd97a540 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562cc23a94c8 CR3=000000003465e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff84a0e47b RDX=ffff88800eceb780 RSI=ffffffff84a0e484 RDI=0000000000000005 RBP=0000000000000000 RSP=ffff888030befc78 R8 =0000000000000000 R9 =fffffbfff0fe19e4 R10=0000000000000000 R11=0000000000000000 R12=ffff88802d85b00c R13=0000000000000000 R14=ffff888027dec460 R15=00007f65cc2d4fff RIP=ffffffff84a8df8e RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f65cc247b80 CR3=00000000264b2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78 XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000