Warning: Permanently added '[localhost]:51568' (ECDSA) to the list of known hosts. 2025/01/23 14:59:52 fuzzer started 2025/01/23 14:59:52 dialing manager at localhost:38529 syzkaller login: [ 72.663428] cgroup: Unknown subsys name 'net' [ 72.805697] cgroup: Unknown subsys name 'cpuset' [ 72.816240] cgroup: Unknown subsys name 'rlimit' [ 77.944034] kmemleak: 2 new suspected memory leaks (see /sys/kernel/debug/kmemleak) 2025/01/23 15:00:09 syscalls: 247 2025/01/23 15:00:09 code coverage: enabled 2025/01/23 15:00:09 comparison tracing: enabled 2025/01/23 15:00:09 extra coverage: enabled 2025/01/23 15:00:09 setuid sandbox: enabled 2025/01/23 15:00:09 namespace sandbox: enabled 2025/01/23 15:00:09 Android sandbox: enabled 2025/01/23 15:00:09 fault injection: enabled 2025/01/23 15:00:09 leak checking: enabled 2025/01/23 15:00:09 net packet injection: enabled 2025/01/23 15:00:09 net device setup: enabled 2025/01/23 15:00:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/01/23 15:00:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/01/23 15:00:09 USB emulation: enabled 2025/01/23 15:00:09 hci packet injection: enabled 2025/01/23 15:00:09 wifi device emulation: enabled 2025/01/23 15:00:09 802.15.4 emulation: enabled 2025/01/23 15:00:09 fetching corpus: 0, signal 0/0 (executing program) 2025/01/23 15:00:11 starting 8 fuzzer processes 15:00:11 executing program 0: openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20c140, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x202, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xbc, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_PAN_ID={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8000000}, 0x200088b9) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x4000, 0x140, 0x3}, 0x18) getdents64(r2, &(0x7f0000000400)=""/4096, 0x1000) openat$incfs(r2, &(0x7f0000001400)='.log\x00', 0x400000, 0x8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x30, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040001}, 0x8010) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000015c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001600)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x5c, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008008) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001740), 0x42, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000017c0), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000001940)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f0000001800)={0xe0, r7, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xec7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1a1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20004041}, 0x240cc005) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000001a40)={&(0x7f0000001980), 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4040040}, 0x4008090) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004) 15:00:11 executing program 4: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) mq_getsetattr(r0, &(0x7f0000000040)={0xf92, 0x200, 0x80000000, 0x5}, &(0x7f0000000080)) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3020000}, 0xc, &(0x7f0000000540)={&(0x7f0000000140)={0x3fc, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd8fa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x536}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_NODE_ID={0x76, 0x3, "081c034781c098aac766d039fc80ac1090c64ae22b8653e5ac60e2d5c4821aaa628c8681045ba290083543079f5f9ca7726ffd9359b8c01bdb976db478eab622374355f3f6b87877ec67fb4ec1cb37e27724e0c1440e5175178f59767f87492127f368a27c8ce63fc56c21f422fadb4e001e"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x918479b4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe06}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5fc}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x85f}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1145d806b47f18a6dea06c6284e2b0dff43209ca5e12c5632287d18a6494"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xc3, 0x3, "9e84f39656627db7abbb20c2a18d49b5e0f49d1e12a53247a2012006864b9ac96b81da936acffaf14afb6b3bed1db0cfb0ebae3e7f8f51bb314389f0de7851d144a988e8cb40bfc3880c69ce51fdff1cc96239ad09d56cdb0e4e0eb21fb7fb52047b6d8863ec600490b80e5884c59991d85d8845a65f654125a4eee7e4e0c4833fcdb5eef33afeca5850ab63c17057233b004cc6206c1665ce33a835b648c85bdb2da3cab69e4893f6d055f9e67556562227a1e732738ab7acf2736ac782ce"}, @TIPC_NLA_NODE_ID={0x7a, 0x3, "eefa44f8fd0bd257ffa17e1c5fdd1314632bf28a284fad93d0c806f6e8de1430b6c07afe13ee9e96340aad160f970f89319d93897bf770f76a2294fe536eb8672d448173e385d0ad63f2735ef7ff50ba97e779ec5e3e8626b1685a504fb47d7de66fa2d78f63222876345ea43fb1f50eed187bfddc25"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "39dc59668f026b50331bd0529a67c1abfa69e08c1ce729119d12"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "bd26d4e5d42523fe952cdd21cf5ebd99bd34e503ce6612b9"}}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x40000800}, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000005c0), 0x402000, 0x0) getdents64(r1, &(0x7f0000000600)=""/87, 0x57) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'gre0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x1, 0x8, 0x1, 0x1000, {{0x25, 0x4, 0x2, 0x1, 0x94, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @broadcast, {[@timestamp={0x44, 0x20, 0xc3, 0x0, 0x2, [0x3f, 0x1, 0x4, 0xfffffffa, 0x5, 0x80, 0x6]}, @timestamp_addr={0x44, 0x34, 0xfd, 0x1, 0x1, [{@broadcast, 0x7fffffff}, {@broadcast, 0x4}, {@rand_addr=0x64010100, 0x8}, {@empty, 0x1}, {@empty, 0x400}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @lsrr={0x83, 0x1f, 0x87, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote, @local, @multicast2, @empty]}, @end, @generic={0x86, 0x2}, @end, @end, @lsrr={0x83, 0x7, 0x98, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x101}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x187}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x881) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x14, 0x0, &(0x7f00000008c0)=[@increfs_done], 0x89, 0x0, &(0x7f0000000900)="44f53e3f0b76f9a67a9579c287d47f5ed18098f33be66639ae60e8dde2db6795f463dab7bf53eee71dac129944608495168e126493b6042beb2e3a78ca47dc5739280322a3f603d710f271b6a60eac5b0665d4eb8b4680bd5c8738dd41d1a596d46c1365bb138f47e0524edf47026b994a4068b40922a109a8c1b9f87473fcccc244a30c69fe076cfd"}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000ac0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x700000007}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1041850c}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r9, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x81, 0x4]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x779}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40) [ 91.098994] audit: type=1400 audit(1737644411.511:7): avc: denied { execmem } for pid=271 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:00:11 executing program 1: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = clone3(&(0x7f0000001380)={0xa0104080, &(0x7f0000001140), &(0x7f0000001180)=0x0, &(0x7f00000011c0), {0x3a}, &(0x7f0000001200)=""/239, 0xef, &(0x7f0000001300)=""/15, &(0x7f0000001340)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) r3 = getpid() r4 = getpid() r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000001480)={0x181002400, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, {0x41}, &(0x7f0000000100)=""/5, 0x5, &(0x7f0000000140)=""/4096, &(0x7f0000001400)=[0x0, 0x0, r1, 0x0, 0x0, r3, 0xffffffffffffffff, r4], 0x8, {r5}}, 0x58) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x90008000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x6c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000001640)={{0x0, 0x1f}, {0x1, 0x8}, 0x7ff, 0x4, 0x80}) wait4(r4, &(0x7f00000016c0), 0x80000000, &(0x7f0000001700)) r9 = clone3(&(0x7f0000001a00)={0x1038b80, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880), {0x37}, &(0x7f00000018c0)=""/45, 0x2d, &(0x7f0000001900)=""/160, &(0x7f00000019c0)=[r2, r3, r6, r3, r6, r4], 0x6, {r0}}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f00000017c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3f}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r11 = clone3(&(0x7f0000001e40)={0x0, &(0x7f0000001b80), &(0x7f0000001bc0), &(0x7f0000001c00), {0xe}, &(0x7f0000001c40)=""/250, 0xfa, &(0x7f0000001d40)=""/175, &(0x7f0000001e00)=[r7], 0x1, {r5}}, 0x58) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000001ec0)={{0x1, 0xffffffffffffffff, 0xee01, 0xee00, 0x0, 0x1, 0x2}, 0xffff, 0x3, 0x7, 0xffffffffffffff54, r9, r11, 0x8}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x60, r12, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x8}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24048086) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r13, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x60004004) 15:00:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4004004) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4800}, 0x28044080) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r2) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa1cfa2701a879f05}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x800000}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x101}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4010) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r7, 0x300, 0x70bd25, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x6000) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x48, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@pci={{0x8}, {0x11}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4020040}, 0x40000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48044) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r3, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x11) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd0, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0xb4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2d67}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe6d5}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcdf}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xd0}, 0x1, 0x0, 0x0, 0x50}, 0x40c1) 15:00:11 executing program 3: timer_getoverrun(0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x3d}, @val={0x8}, @val={0xc, 0x99, {0x8, 0x7}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x800) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000140)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f00000001c0)) r0 = clone3(&(0x7f0000001400)={0x1000000, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x41}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f00000012c0)=""/216, &(0x7f00000013c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x6}, 0x58) rt_sigqueueinfo(r0, 0x28, &(0x7f0000001480)={0x14, 0x80000000, 0x10000}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000001500)={r0}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000001540), 0xa4c0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x2c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x24040011) openat$cgroup_pressure(r1, &(0x7f00000017c0)='io.pressure\x00', 0x2, 0x0) r2 = openat$cgroup(r1, &(0x7f0000001800)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000001840)='devices.deny\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001900)={0x10c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7ff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x50, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x4005) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x44000) 15:00:11 executing program 5: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x4) socketpair(0x15, 0x800, 0x8001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x3cdf}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6889}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x8800) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x74, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "8ed12079f2665b23824ad1d3e087b178"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "7b09f800e5e9971f7b9463e709359111"}]}, 0x74}, 0x1, 0x0, 0x0, 0x48000}, 0x44000) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xc080000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xc70}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3ff, 0x86b0, 0x7]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}]]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20010000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000007c0)) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x8}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44851}, 0x0) prctl$PR_GET_IO_FLUSHER(0x3a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, 0x0, 0x800, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000080) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x110080}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xac, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xac}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 15:00:11 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x20}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x3f}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x5c}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x33}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008001}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x59721ee228014645, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x9, 0x2, 0xff]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x408000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x1, 0x10, 0x8, 0x1, {{0x16, 0x4, 0x1, 0x2, 0x58, 0x64, 0x0, 0x20, 0x4, 0x0, @empty, @broadcast, {[@cipso={0x86, 0x2b, 0x2, [{0x5, 0xb, "69b1b15c603fafe812"}, {0x7, 0xe, "5e5a045ba1b8327713ea4dae"}, {0x1, 0xc, "272b29fac51615ae94d3"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x5c, 0x0, 0x1, [0x2, 0x3f, 0x3, 0x302]}]}}}}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x51) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x400, 0x80000, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x445) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4f5}]}, 0x28}}, 0x4000005) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r3) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4044009}, 0x8c4) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000a40), 0x500100, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r3) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x54, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffc01}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4a5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x4040001) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x7c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '@)[+[$.{})((*\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) 15:00:11 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x22}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}}, 0x48080) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x1d0, r2, 0xd03, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xbc, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc65f11f}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc924e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62ede89e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eeb38b3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd16e078}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfcd55bd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65a7fbef}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a4e9f7b}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x421c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a4c1d79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x202d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb2e3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6fe8866d}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cdbff13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdc3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d3b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9c25}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc0ce}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73d02d22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe136}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x503f0bfc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa20}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x937f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5fd03cf5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7196}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd36f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24f7095b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cd4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a24f558}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe802}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x26ad3773}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc6c5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1579343d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fde8d57}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x40800}, 0x8001) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r3, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x2040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_INTERFACE(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x40, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x765dba858c7bc2c6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r6, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x61}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040041}, 0x4008801) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}}, 0x40880) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) [ 92.571097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.679851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.724566] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.727471] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.729977] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.731199] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.731427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.732627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.736179] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.739914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.740216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.744147] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.744517] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.745050] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.746192] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.746440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.746713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.746760] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.766475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.768936] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.774599] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.776397] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.777653] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.800195] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.802264] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.802531] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.805147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.806201] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.809130] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.809692] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.810646] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 92.811469] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.812138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.812800] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.817464] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.829245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.832112] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.832448] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 92.835404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.837114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 92.839273] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.865795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.867306] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.871979] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.875040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.901407] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.914333] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.915710] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.877265] Bluetooth: hci6: command tx timeout [ 94.878140] Bluetooth: hci2: command tx timeout [ 94.941155] Bluetooth: hci0: command tx timeout [ 94.941360] Bluetooth: hci1: command tx timeout [ 94.941550] Bluetooth: hci7: command tx timeout [ 94.941945] Bluetooth: hci3: command tx timeout [ 95.004939] Bluetooth: hci4: command tx timeout [ 95.005184] Bluetooth: hci5: command tx timeout [ 96.925227] Bluetooth: hci6: command tx timeout [ 96.925353] Bluetooth: hci2: command tx timeout [ 97.023996] Bluetooth: hci3: command tx timeout [ 97.024101] Bluetooth: hci7: command tx timeout [ 97.024200] Bluetooth: hci1: command tx timeout [ 97.024270] Bluetooth: hci0: command tx timeout [ 97.053936] Bluetooth: hci5: command tx timeout [ 97.054504] Bluetooth: hci4: command tx timeout [ 98.973059] Bluetooth: hci6: command tx timeout [ 98.974366] Bluetooth: hci2: command tx timeout [ 99.038046] Bluetooth: hci0: command tx timeout [ 99.038925] Bluetooth: hci1: command tx timeout [ 99.039019] Bluetooth: hci7: command tx timeout [ 99.039088] Bluetooth: hci3: command tx timeout [ 99.101923] Bluetooth: hci5: command tx timeout [ 99.102029] Bluetooth: hci4: command tx timeout [ 101.028114] Bluetooth: hci6: command tx timeout [ 101.028220] Bluetooth: hci2: command tx timeout [ 101.088225] Bluetooth: hci3: command tx timeout [ 101.089662] Bluetooth: hci7: command tx timeout [ 101.091348] Bluetooth: hci1: command tx timeout [ 101.091947] Bluetooth: hci0: command tx timeout [ 101.156914] Bluetooth: hci4: command tx timeout [ 101.157011] Bluetooth: hci5: command tx timeout [ 152.502023] syz-executor.0 (281) used greatest stack depth: 23312 bytes left [ 155.442868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.444303] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.447887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.456500] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.458596] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.461563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.466998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.474548] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.475872] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.480945] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.490720] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.492020] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.500344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.509044] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.516176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.528089] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.534352] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.535948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.589760] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.597257] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.602187] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.612613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.630243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.635163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.642222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.665828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.670121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.670442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.686366] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.692527] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.700288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.701432] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.702715] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.710461] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 155.711061] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.723536] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 155.724682] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.731837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.732786] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 155.760796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 155.778486] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 155.781579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 155.796986] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 155.823060] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 155.826682] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 155.829915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 155.853065] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 155.853577] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 157.532944] Bluetooth: hci0: command tx timeout [ 157.537941] Bluetooth: hci1: command tx timeout [ 157.601999] Bluetooth: hci2: command tx timeout [ 157.728860] Bluetooth: hci3: command tx timeout [ 157.788984] Bluetooth: hci5: command tx timeout [ 157.789295] Bluetooth: hci4: command tx timeout [ 157.852903] Bluetooth: hci7: command tx timeout [ 157.917218] Bluetooth: hci6: command tx timeout [ 159.581456] Bluetooth: hci1: command tx timeout [ 159.581571] Bluetooth: hci0: command tx timeout [ 159.645052] Bluetooth: hci2: command tx timeout [ 159.772910] Bluetooth: hci3: command tx timeout [ 159.836977] Bluetooth: hci4: command tx timeout [ 159.837088] Bluetooth: hci5: command tx timeout [ 159.900958] Bluetooth: hci7: command tx timeout [ 159.964910] Bluetooth: hci6: command tx timeout [ 161.628911] Bluetooth: hci0: command tx timeout [ 161.629043] Bluetooth: hci1: command tx timeout [ 161.693112] Bluetooth: hci2: command tx timeout [ 161.821065] Bluetooth: hci3: command tx timeout [ 161.884973] Bluetooth: hci5: command tx timeout [ 161.885344] Bluetooth: hci4: command tx timeout [ 161.948907] Bluetooth: hci7: command tx timeout [ 162.012900] Bluetooth: hci6: command tx timeout [ 163.677892] Bluetooth: hci0: command tx timeout [ 163.678024] Bluetooth: hci1: command tx timeout [ 163.741883] Bluetooth: hci2: command tx timeout [ 163.868906] Bluetooth: hci3: command tx timeout [ 163.934420] Bluetooth: hci5: command tx timeout [ 163.934527] Bluetooth: hci4: command tx timeout [ 163.996905] Bluetooth: hci7: command tx timeout [ 164.060934] Bluetooth: hci6: command tx timeout [ 217.962524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.964059] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.964953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.973360] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.974438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 217.974932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.978262] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.981260] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.982309] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.989371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.993170] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.994414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.030446] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.031873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.032908] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.040222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.042515] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.043214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.092867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.093759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.107475] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.113625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.118001] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.129052] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.134046] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.135925] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.137210] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.163397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.169516] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.171147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.178581] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.183083] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 218.188108] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.192628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.193112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 218.193858] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 218.195743] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 218.197312] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 218.198147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 218.204093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.205701] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 218.208306] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 218.210127] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 218.215061] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 218.227928] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.228262] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 218.232218] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 218.232890] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 219.996916] Bluetooth: hci1: command tx timeout [ 220.060900] Bluetooth: hci0: command tx timeout [ 220.125037] Bluetooth: hci2: command tx timeout [ 220.188967] Bluetooth: hci3: command tx timeout [ 220.272355] Bluetooth: hci5: command tx timeout [ 220.272440] Bluetooth: hci4: command tx timeout [ 220.273685] Bluetooth: hci6: command tx timeout [ 220.317385] Bluetooth: hci7: command tx timeout [ 222.044940] Bluetooth: hci1: command tx timeout [ 222.110309] Bluetooth: hci0: command tx timeout [ 222.174905] Bluetooth: hci2: command tx timeout [ 222.238046] Bluetooth: hci3: command tx timeout [ 222.301170] Bluetooth: hci6: command tx timeout [ 222.301930] Bluetooth: hci4: command tx timeout [ 222.302058] Bluetooth: hci5: command tx timeout [ 222.364973] Bluetooth: hci7: command tx timeout [ 224.092938] Bluetooth: hci1: command tx timeout [ 224.157208] Bluetooth: hci0: command tx timeout [ 224.221004] Bluetooth: hci2: command tx timeout [ 224.285037] Bluetooth: hci3: command tx timeout [ 224.348985] Bluetooth: hci5: command tx timeout [ 224.349583] Bluetooth: hci4: command tx timeout [ 224.349685] Bluetooth: hci6: command tx timeout [ 224.414834] Bluetooth: hci7: command tx timeout [ 226.140974] Bluetooth: hci1: command tx timeout [ 226.205072] Bluetooth: hci0: command tx timeout [ 226.269180] Bluetooth: hci2: command tx timeout [ 226.332945] Bluetooth: hci3: command tx timeout [ 226.397516] Bluetooth: hci6: command tx timeout [ 226.397645] Bluetooth: hci4: command tx timeout [ 226.397711] Bluetooth: hci5: command tx timeout [ 226.460933] Bluetooth: hci7: command tx timeout [ 280.959293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.960465] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.961347] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.963903] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.965030] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.965651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.019797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 281.020360] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 281.048887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 281.049114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 281.061875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 281.107709] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 281.108103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 281.142050] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 281.149484] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.152076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.156325] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 281.156468] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.156550] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.159169] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.160525] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 281.182231] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 281.182535] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.183646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.189083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 281.189438] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 281.221277] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.222121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 281.222500] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.225246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 281.225465] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.227444] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.240155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.241465] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.243323] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 281.256050] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.260955] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.261179] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.261365] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 281.269504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.270424] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.272439] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.273605] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.274252] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.284188] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 281.313459] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.313705] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.320381] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.036966] Bluetooth: hci0: command tx timeout [ 283.294438] Bluetooth: hci2: command tx timeout [ 283.294714] Bluetooth: hci1: command tx timeout [ 283.357137] Bluetooth: hci5: command tx timeout [ 283.420986] Bluetooth: hci6: command tx timeout [ 283.421893] Bluetooth: hci3: command tx timeout [ 283.422068] Bluetooth: hci4: command tx timeout [ 283.422222] Bluetooth: hci7: command tx timeout [ 285.087451] Bluetooth: hci0: command tx timeout [ 285.340912] Bluetooth: hci1: command tx timeout [ 285.341017] Bluetooth: hci2: command tx timeout [ 285.411851] Bluetooth: hci5: command tx timeout [ 285.469843] Bluetooth: hci7: command tx timeout [ 285.469948] Bluetooth: hci4: command tx timeout [ 285.470004] Bluetooth: hci3: command tx timeout [ 285.470059] Bluetooth: hci6: command tx timeout [ 287.133839] Bluetooth: hci0: command tx timeout [ 287.388883] Bluetooth: hci2: command tx timeout [ 287.389007] Bluetooth: hci1: command tx timeout [ 287.453816] Bluetooth: hci5: command tx timeout [ 287.516946] Bluetooth: hci6: command tx timeout [ 287.517076] Bluetooth: hci3: command tx timeout [ 287.517175] Bluetooth: hci4: command tx timeout [ 287.517252] Bluetooth: hci7: command tx timeout [ 289.183877] Bluetooth: hci0: command tx timeout [ 289.437950] Bluetooth: hci2: command tx timeout [ 289.437983] Bluetooth: hci1: command tx timeout [ 289.518185] Bluetooth: hci5: command tx timeout [ 289.565115] Bluetooth: hci6: command tx timeout [ 289.565375] Bluetooth: hci7: command tx timeout [ 289.565600] Bluetooth: hci4: command tx timeout [ 289.565666] Bluetooth: hci3: command tx timeout [ 342.895693] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.898200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.899394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.942875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.954806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.955464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.972654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 342.975868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 342.977431] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 342.980622] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 342.990009] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 342.992388] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 343.084708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.087620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.090138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.091047] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.091259] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.094192] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.100414] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.101590] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.107031] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.140572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.151790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.162127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 343.164411] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 343.165701] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 343.166687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 343.168246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 343.169472] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 343.171046] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 343.171474] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.183419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 343.190049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 343.203381] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.204078] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 343.214516] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 343.219193] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 343.226967] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 343.232866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 343.236977] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 343.242060] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 343.276174] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 343.320489] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 343.322128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 343.323205] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 343.324442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.327168] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 343.328242] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.989877] Bluetooth: hci0: command tx timeout [ 345.052870] Bluetooth: hci1: command tx timeout [ 345.180914] Bluetooth: hci7: command tx timeout [ 345.180942] Bluetooth: hci2: command tx timeout [ 345.309078] Bluetooth: hci6: command tx timeout [ 345.309500] Bluetooth: hci3: command tx timeout [ 345.374840] Bluetooth: hci4: command tx timeout [ 345.374849] Bluetooth: hci5: command tx timeout [ 347.037857] Bluetooth: hci0: command tx timeout [ 347.101487] Bluetooth: hci1: command tx timeout [ 347.230400] Bluetooth: hci2: command tx timeout [ 347.230475] Bluetooth: hci7: command tx timeout [ 347.357931] Bluetooth: hci6: command tx timeout [ 347.357980] Bluetooth: hci3: command tx timeout [ 347.420884] Bluetooth: hci4: command tx timeout [ 347.420975] Bluetooth: hci5: command tx timeout [ 349.085851] Bluetooth: hci0: command tx timeout [ 349.180595] Bluetooth: hci1: command tx timeout [ 349.276815] Bluetooth: hci2: command tx timeout [ 349.295367] Bluetooth: hci7: command tx timeout [ 349.406849] Bluetooth: hci3: command tx timeout [ 349.421385] Bluetooth: hci6: command tx timeout [ 349.468878] Bluetooth: hci5: command tx timeout [ 349.469539] Bluetooth: hci4: command tx timeout [ 351.132907] Bluetooth: hci0: command tx timeout [ 351.197016] Bluetooth: hci1: command tx timeout [ 351.325534] Bluetooth: hci7: command tx timeout [ 351.327065] Bluetooth: hci2: command tx timeout [ 351.453424] Bluetooth: hci6: command tx timeout [ 351.453520] Bluetooth: hci3: command tx timeout [ 351.518816] Bluetooth: hci5: command tx timeout [ 351.518904] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 15:05:22 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000001 RDX=ffff888027907c01 RSI=ffff888027907c90 RDI=ffff888027907c90 RBP=ffff888027907780 RSP=ffff8880279076b8 R8 =0000000000000001 R9 =ffff888027907768 R10=000000000003ab7c R11=000000000001240f R12=ffff888027907788 R13=ffff888027907770 R14=ffff888027907c90 R15=ffff888027907728 RIP=ffffffff81349aba RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557fbb4400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb59a76eb70 CR3=0000000030d7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=2e6f747079726362696c2f756e672d78 XMM02=00312e312e6f732e6f74707972636269 XMM03=6c2f756e672d78756e696c2d34365f36 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000080010001 RBX=ffffffff8163ddb0 RCX=ffffffff81601dbc RDX=ffff88802edc0000 RSI=ffffffff8160203d RDI=0000000000000001 RBP=ffff88806cf2cb88 RSP=ffff88806cf09e28 R8 =0000000000000000 R9 =fffffbfff0c80afa R10=0000000000000001 R11=0000000000000001 R12=000000000003a64c R13=ffff88806cf2d3d8 R14=ffff88806cf2cb40 R15=dffffc0000000000 RIP=ffffffff815937d4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f56e832e540 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe5700000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005593148fd4c8 CR3=000000003593c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00642e65626f7270646f6d2f6374652f XMM01=00642e65626f7270646f6d2f6374652f XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000