Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:41748' (ECDSA) to the list of known hosts. 2025/05/25 03:40:28 fuzzer started 2025/05/25 03:40:29 dialing manager at localhost:46087 syzkaller login: [ 95.383354] cgroup: Unknown subsys name 'net' [ 95.520243] cgroup: Unknown subsys name 'cpuset' [ 95.562853] cgroup: Unknown subsys name 'rlimit' 2025/05/25 03:40:47 syscalls: 202 2025/05/25 03:40:47 code coverage: enabled 2025/05/25 03:40:47 comparison tracing: enabled 2025/05/25 03:40:47 extra coverage: enabled 2025/05/25 03:40:47 setuid sandbox: enabled 2025/05/25 03:40:47 namespace sandbox: enabled 2025/05/25 03:40:47 Android sandbox: enabled 2025/05/25 03:40:47 fault injection: enabled 2025/05/25 03:40:47 leak checking: enabled 2025/05/25 03:40:47 net packet injection: enabled 2025/05/25 03:40:47 net device setup: enabled 2025/05/25 03:40:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/25 03:40:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/25 03:40:47 USB emulation: enabled 2025/05/25 03:40:47 hci packet injection: enabled 2025/05/25 03:40:47 wifi device emulation: enabled 2025/05/25 03:40:47 802.15.4 emulation: enabled 2025/05/25 03:40:47 fetching corpus: 0, signal 0/0 (executing program) 2025/05/25 03:40:49 starting 8 fuzzer processes 03:40:49 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_usb_connect$uac1(0x1, 0xe5, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x4, 0xe0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xffff, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf2, 0x2, 0x4, 0x6, '\n', "eefd1c"}, @as_header={0x7, 0x24, 0x1, 0xf7, 0x53, 0x1001}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xff, 0x3, 0x8, 0x6, "60e7"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3f, 0x4, 0x6, 0xfd, "", "c889"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x200, 0xef9f, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xc0, 0x0, 0x6, {0x7, 0x25, 0x1, 0x83, 0x40, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x1, 0x7e1487749139245b}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x1, "ca631ee5039bebb3"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x1, 0xff, 'A'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xa652, 0x1, 0xff, "34dc"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x4, 0xbb, 0x0, "8197"}, @as_header={0x7, 0x24, 0x1, 0xfe, 0x80, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf8, 0xaa, 0x8, {0x7, 0x25, 0x1, 0x80, 0x40, 0x800}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x1, 0xd6, 0x4, 0x20, 0x7a}, 0x94, &(0x7f0000000140)={0x5, 0xf, 0x94, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0xd, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "526ba025a3dfe70c150548044499a0c4"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "e9b1384b42cfdfe52da981dd5f57bc59"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x6, 0xf, 0xf201, [0xc0c0, 0xd8, 0xc03f, 0x3f3f, 0xf, 0xf0]}, @generic={0x32, 0x10, 0xb, "f5e6bf75400f33da43f5b9343b785e966803b4c87622cfa6ca3a8702674fe91b9727dc3b571a5933c7f63b98e959f0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x4, 0x8000}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1404}}, {0x8c, &(0x7f0000000240)=@string={0x8c, 0x3, "34d822fa88e0ef0a4245887f7d9acf3603eec87c61a8320d2ee273bc0ee25f8657e9504db7744e612958118956faa59a4b7532910419945053d2f18d0576ce49e631cdf63bfaff8568a696430c152cd84fe8f60e8def921aa29cffc789a5cd3733931306efc94c0b023b6227f68149a693835b6896de8d5b67a3f5e8a8e3ebcc14c76c7fbd15b8f5607c"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x809}}]}) syz_usb_control_io$uac1(r1, &(0x7f0000000480)={0x14, &(0x7f0000000380)={0x0, 0x23, 0x7c, {0x7c, 0x7, "c86d86b3d35ac4c6ec4795c8d634330e4b1f447359da761a8fe1a4b71c325418048a301fbc84cb441651a56740894634454e27fc6a0dd1c81c1b50cb2dbe3cf019daafc6d47196293283a11d39f4e0a7040b3c1c970e7d0acb861be5708222f0859d00554fa57451d2b47d63379686dbba674a13ec28e9616b35"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x439}}}, &(0x7f0000000740)={0x44, &(0x7f00000004c0)={0x40, 0x1, 0x9e, "ca17580e08e5ee4b2d7d4d575776bdbef32e2783161a072b1d8c988f1c7e2edd3216b886bb6baf3fc9ae1e249a19c868906a496d0d3d256b688cda4d38db184a886911bcf41f160a8c44569044bba6aa66be72891125d247ffa044dc5d510726e5f7250e4ea4094cca99edf709cf4cc6323c4da0d0e7fc453dc8c057a52cd00bb20508c5d0335fd8e8560e64d17d9284773a88b034f2cb2e2a75cb8b0ffc"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x81, 0x1, 'A'}, &(0x7f0000000640)={0x20, 0x82, 0x1, "d3"}, &(0x7f0000000680)={0x20, 0x83, 0x1, '#'}, &(0x7f00000006c0)={0x20, 0x84, 0x4, "19eee042"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "6e4594"}}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3e8, 0x8, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00'}) syz_usb_control_io$uac1(r1, &(0x7f0000000b40)={0x14, &(0x7f0000000a00)={0x40, 0x2b, 0xe6, {0xe6, 0x5, "6a60cba491b01f78a3e8d5ee185c3b594ddfeaa09870a21274fc536bab1b9958bd084427f729e0218ee992c039147011d2a22ca51c9aae19f78a93f88fbaf56399942a890ee46825d7a8b5724606b8498890b896588dc294491b58e25c66f5865a3ddf5a8c2a0fbce7f5157c305ead9bb613a7831e24c3b18114cd7c6655e0d3e3b6fcbf79beb017d55035175c051e2142004c6ce1ed8d7eb470e8c9c6eb2522a37f02cfba782258eab82497ba6872bb7a57a70b96fbe37aa4df6ae0d42b6a6b46b77be540a93dccf3d39c2b18611afbf626b96945d7e97ac7b15581e05764657094e175"}}, &(0x7f0000000b00)={0x0, 0x3, 0x14, @string={0x14, 0x3, "7c414481e15da3f1f89b4fbbc9a38efd7de8"}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000b80)={0x20, 0x30, 0x50, "aed8a4f3d832bf18dff11c3754d17acd96c783eeb781eca6a3baed28c503d92fedc1342e83f6a4036a79fc633e02b525781f2e4e66e47b2f845bb35177639a4f5ed4e8e4ffb59fec88a7e2ce935bae02"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000c80)={0x20, 0x81, 0x3, "54a0c0"}, &(0x7f0000000cc0)={0x20, 0x82, 0x3, "fb8e1f"}, &(0x7f0000000d00)={0x20, 0x83, 0x3, "1266cb"}, &(0x7f0000000d40)={0x20, 0x84, 0x4, "b5d5e724"}, &(0x7f0000000d80)={0x20, 0x85, 0x3, 'LN9'}}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x34, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1ff}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008891}, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000f40)="384031087b4dc5ec600858b414579c36f71979c75339172795961e8abafae7fffd70dd0057209fdf7a7ea3b49a69281c8a3fcf9bb775cecec713b15ebac20f8e8e97d4477ad94fb2dbb544e105") sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0xe0, 0x4, 0x8, 0x101, 0x0, 0x0, {0x46e4e14c63163e81, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8529}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x35}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x227}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x850}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x5f80}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0xe0}}, 0x4000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x48, 0x0, 0x900, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x20}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x91}, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000001700)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001380)={0x304, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3ef}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x66}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xdd0e}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x114, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x60, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffff000}]}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x88, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001880)={'wlan0\x00'}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 03:40:49 executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008042) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f5, 0x400, 0x70bd2c, 0x25dfdbfe, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80c4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$FOU_CMD_GET(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x68}, 0x1, 0x0, 0x0, 0x48881}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008020}, 0x48819) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0x922}}, './file0\x00'}) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4a00002}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x58, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000846}, 0x4010) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, r0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000940)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x40, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xad0}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000841}, 0x4000081) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r2) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r10, 0x800, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x11) 03:40:49 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x600080}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x5, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}]}, 0x1c}}, 0x24010001) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x43}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x6, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc8c2}, 0x48041) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x400, 0x9, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r2 = socket(0x2, 0x3, 0x100) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, 0x0, 0x20, 0x6, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x80) r3 = pidfd_getfd(r0, r0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x24000000) r5 = pidfd_getfd(r0, r3, 0x0) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, 0x3fa, 0x20, 0x70bd26, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c080}, 0x4040) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000a80)={&(0x7f0000000980), 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r6, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x800) 03:40:49 executing program 3: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x1c}}, 0x4000010) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r0, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000400)=0x2, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40015) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc}, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}}, 0x20004800) r5 = socket$netlink(0x10, 0x3, 0xf) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, r5, {0x200}}, './file0\x00'}) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000940)=0x7, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x34, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40080) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008146}, 0x4000000) [ 114.996725] audit: type=1400 audit(1748144449.235:7): avc: denied { execmem } for pid=272 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 03:40:49 executing program 4: sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x85000422}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0xc, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x40) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}}, 0x8c1) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x80) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x100}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x4, 0xff, 0x6, 0x58, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, 0x20, 0x400c, 0x7ffe, 0x5d9}}) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x54, 0x0, 0x2b307cfa9fbc4cee, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r1}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x40c0) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4040081) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0x4002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = pidfd_getfd(r2, r3, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x20, 0x3f7, 0x200, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, './file0'}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x5) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, 0x3, 0x8, 0xd02, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x21020000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004851}, 0x84045) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x20, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x48014) r6 = socket(0x3, 0x4, 0x6020) sendmsg$AUDIT_DEL_RULE(r6, &(0x7f0000001300)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000e80)={0x424, 0x3f4, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x2, 0x22, [0x2, 0x400, 0xffffffff, 0x4, 0x1, 0x5, 0xfd, 0xade, 0x3, 0x6, 0x9, 0x7, 0x5, 0x800, 0x2bb, 0x10000, 0x7, 0x3, 0x2, 0xf4b1, 0x80, 0x18, 0x2c0, 0x3, 0x200, 0x3ff, 0x1e5b, 0xffffffff, 0x8, 0x1ff, 0x5, 0xffff, 0xfffffffd, 0x8, 0x9, 0xcc, 0x0, 0x0, 0x101, 0x9, 0x800, 0x2, 0x9, 0x7ff, 0x62, 0xfffffffe, 0x267, 0x7ff, 0x2, 0x9, 0x2, 0x6, 0x1ff, 0x6ba, 0x400, 0x1000, 0x2, 0x80, 0x81, 0xfffffff7, 0x7c, 0x1, 0x4, 0x7], [0xffff, 0x6, 0xff, 0x1f, 0x4, 0x1000, 0x979e, 0x3, 0x7, 0x9, 0x5, 0x8001, 0x8, 0x3, 0x0, 0x0, 0xf9e, 0x1, 0x7fff, 0x2, 0x4, 0x7, 0x401, 0x7, 0xbc, 0x0, 0x10001, 0x79c, 0x0, 0x9, 0x4, 0x3, 0x6, 0x40, 0x10000, 0x1f0f, 0x8, 0x5, 0x5, 0x5, 0x4bc2, 0x8, 0x80000000, 0x6, 0x9, 0x9, 0x3, 0x8, 0x2, 0x400, 0x0, 0x8, 0x193, 0x200, 0x0, 0x800, 0xffffffff, 0x2, 0xeb, 0x8, 0x1, 0x5, 0x5, 0xa9], [0x2, 0x2, 0x9, 0xffffffc0, 0x5, 0x6822ec52, 0x3, 0x6bd, 0x7f, 0x3d, 0x9, 0x8ca, 0xdb, 0x6, 0x2, 0x40, 0x3f, 0x400, 0x4, 0xfffffff7, 0x6, 0x6f, 0x40, 0x8, 0x0, 0x200, 0x1, 0x4, 0x7c06, 0x4, 0x5, 0xcf1, 0x64, 0x9, 0x5, 0x5ec, 0xcc8, 0x319, 0x84, 0x5, 0x7, 0x0, 0x46f, 0xcc21, 0x2, 0x80000000, 0x81, 0x2, 0x8000, 0x7f, 0x6, 0x0, 0x42b0, 0xa538, 0xffff, 0x1ff, 0x800, 0x1, 0x8eaf, 0x3, 0x0, 0x9, 0x7fff, 0x7], [0x25, 0x20, 0x1, 0x4, 0x0, 0x0, 0x7ff, 0x20, 0xfffffff7, 0x40000000, 0x9, 0x9, 0x8, 0x80000000, 0xfffffff8, 0x1, 0x40e4000, 0x7, 0x5, 0x0, 0x1f, 0x9, 0x3ff, 0x0, 0x7, 0x1, 0x1, 0x1f, 0x7, 0x40, 0x8001, 0x2, 0x7, 0x3, 0x2, 0x6, 0x80, 0x1, 0x8, 0xfff, 0x2, 0x2, 0x1, 0x0, 0x101, 0x1, 0x4, 0x0, 0x1, 0xffffffff, 0x8001, 0x2, 0x9, 0xb4, 0x5, 0x5, 0x0, 0x6, 0x2, 0x2, 0xc5, 0x1, 0x20, 0x9], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x4002081}, 0x4008001) 03:40:49 executing program 5: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x100) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, 0x3, 0x8, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc1a}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000014) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) inotify_add_watch(r1, &(0x7f00000002c0)='./file0\x00', 0x40000012) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000600)={&(0x7f0000000380)={0x278, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x8c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe8b}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "7d7989a04de90c1ebd2da759d8e14f1fc2bc27a6a81ad799c915bdff20621d9d"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0x154, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3647d000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1ff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6645e5ba30f67f51e1395f991c3094aee240af24f7a14e80743d5b5494f2b404"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "51b4d09d6d761974aa40b4967c1d76c4"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a32d15e3f92061051654be8315be1953d099f03595ad11fb47d45736a5cab46e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1bc78048c6e9e9049d226bca32262e66"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_SEC_KEY={0x28, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "69fadb3a6741b88f426f990757e450066da13d862b6812a606f9f93e8a17f139"}]}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "b6ebafc3540881c575645f29be37b67a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "b438b0af53dcc757e3c3dbaaa60ad78c08ea734762f80dceca844b451bc3710d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000680)) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x58, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x884}, 0x44) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r7) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x4000010, r0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000900)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x2007, @fd_index=0x9, 0x7f, 0x0, 0x0, 0x4, 0x1, {0x3, r9}}, 0x1) 03:40:49 executing program 6: getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)=0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) getgroups(0x5, &(0x7f0000000180)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) getgroups(0x6, &(0x7f00000001c0)=[r1, r2, 0xee01, 0xee00, r6, 0xffffffffffffffff]) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)=0x0) getgroups(0x4, &(0x7f00000002c0)=[r10, r4, r8, r2]) getgroups(0x4, &(0x7f0000000300)=[r9, 0xffffffffffffffff, r13, r15]) r18 = getegid() getgroups(0x7, &(0x7f0000000340)=[r17, r17, r16, r3, r16, 0xffffffffffffffff, r11]) getgroups(0xa, &(0x7f0000000380)=[r15, r16, r2, 0xee00, r5, r16, 0xee00, r15, r0, r14]) getgroups(0x7, &(0x7f00000003c0)=[r2, r12, r18, r19, r20, 0x0, r1]) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000400)=""/218) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='#!\x00') r22 = shmget$private(0x0, 0x4000, 0x2, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r22, 0xd, &(0x7f0000000540)=""/228) r23 = getgid() setresgid(r7, r21, r23) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000680)={0x2, &(0x7f0000000640)=[{0x9, 0x8, 0x81, 0x3}, {0x2296, 0x1, 0x5}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x81}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 03:40:49 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10080041}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000005}, 0x44) r1 = pidfd_getfd(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x800, 0x70bd25, 0x25dfdbff, {0x1, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x4040040) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x80000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x90) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) write$bt_hci(r4, &(0x7f00000004c0)={0x1, @write_local_name={{0xc13, 0xf8}, {"927ab42c86d46c5756c9d92294885d3bc2161eff6b33e217d69dff614a5ded9ae7e011b0ab3354eb4ff926cfd5583f5cbe5bf6755ceadf284d260f8d4b8951b62736b26849068acd2bf9a8107ad7b9be894491a14b8ddfb3dad685ae3c39e87c22aee761253fc7d176786ca6a6ffaea377ec270a2647280e8fb98e54b2d218277e4b4d7c11949f6ae399194d6cb14108bf1bddf6892b982d688f253dfcbd6e6cf38fbdcadc575a908b6443bf7fc3df53fd4f8ee1fb7879ad190d1ee2dc9e379ef7dc49617a327b60029641c20201280610c734b22ed748f9df69fcf96f790e0a4b3bd483328c182f178d56fa4791c0028eb9b54b802b9a71"}}}, 0xfc) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4000) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x2}, @NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000900)=0x1, 0x4) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x48}}, 0x4000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000a80)={'wpan1\x00'}) [ 116.406549] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 116.413202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 116.416805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 116.426769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 116.433329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.474545] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 116.480935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 116.484494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 116.490445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 116.495750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.539224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.542120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.547988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.556739] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.568003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.608945] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.616787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.620057] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.630545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.634127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.642332] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.669202] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.683073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.720323] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.754966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.756585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.775725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.783181] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.803224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.807907] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.810033] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.814795] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.819750] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.827814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.856677] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.864219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.875250] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.911196] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.984817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.996000] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.484096] Bluetooth: hci0: command tx timeout [ 118.547740] Bluetooth: hci1: command tx timeout [ 118.613045] Bluetooth: hci2: command tx timeout [ 118.739565] Bluetooth: hci3: command tx timeout [ 118.931725] Bluetooth: hci7: command tx timeout [ 118.932327] Bluetooth: hci4: command tx timeout [ 119.060830] Bluetooth: hci5: command tx timeout [ 119.125160] Bluetooth: hci6: command tx timeout [ 120.532489] Bluetooth: hci0: command tx timeout [ 120.596121] Bluetooth: hci1: command tx timeout [ 120.660568] Bluetooth: hci2: command tx timeout [ 120.787539] Bluetooth: hci3: command tx timeout [ 120.979550] Bluetooth: hci7: command tx timeout [ 120.979970] Bluetooth: hci4: command tx timeout [ 121.108518] Bluetooth: hci5: command tx timeout [ 121.172051] Bluetooth: hci6: command tx timeout [ 122.580672] Bluetooth: hci0: command tx timeout [ 122.644640] Bluetooth: hci1: command tx timeout [ 122.708747] Bluetooth: hci2: command tx timeout [ 122.837693] Bluetooth: hci3: command tx timeout [ 123.028546] Bluetooth: hci4: command tx timeout [ 123.029031] Bluetooth: hci7: command tx timeout [ 123.156483] Bluetooth: hci5: command tx timeout [ 123.220523] Bluetooth: hci6: command tx timeout [ 124.628510] Bluetooth: hci0: command tx timeout [ 124.692500] Bluetooth: hci1: command tx timeout [ 124.756517] Bluetooth: hci2: command tx timeout [ 124.885540] Bluetooth: hci3: command tx timeout [ 125.075723] Bluetooth: hci7: command tx timeout [ 125.076231] Bluetooth: hci4: command tx timeout [ 125.205533] Bluetooth: hci5: command tx timeout [ 125.268938] Bluetooth: hci6: command tx timeout [ 178.413140] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 178.414981] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 178.416935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.422996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 178.423933] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.426785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.437069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 178.444126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 178.444986] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.450457] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.551889] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.557905] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.562208] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.570668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.575315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.624562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.629852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.639679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.647736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.658861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.698350] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.700141] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.711607] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.714845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.733784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.738934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.745056] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.759088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.775338] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.801998] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 178.807272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.819942] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 178.844687] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 178.847164] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 178.852127] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 178.999662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 179.023376] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 179.032769] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 179.046832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 179.058792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.499993] Bluetooth: hci1: command tx timeout [ 180.500014] Bluetooth: hci0: command tx timeout [ 180.692523] Bluetooth: hci2: command tx timeout [ 180.755970] Bluetooth: hci3: command tx timeout [ 180.885575] Bluetooth: hci4: command tx timeout [ 180.947882] Bluetooth: hci5: command tx timeout [ 181.011721] Bluetooth: hci7: command tx timeout [ 181.204584] Bluetooth: hci6: command tx timeout [ 182.548866] Bluetooth: hci1: command tx timeout [ 182.549054] Bluetooth: hci0: command tx timeout [ 182.739573] Bluetooth: hci2: command tx timeout [ 182.803651] Bluetooth: hci3: command tx timeout [ 182.932812] Bluetooth: hci4: command tx timeout [ 182.996514] Bluetooth: hci5: command tx timeout [ 183.061465] Bluetooth: hci7: command tx timeout [ 183.251547] Bluetooth: hci6: command tx timeout [ 184.595569] Bluetooth: hci1: command tx timeout [ 184.596523] Bluetooth: hci0: command tx timeout [ 184.788486] Bluetooth: hci2: command tx timeout [ 184.852603] Bluetooth: hci3: command tx timeout [ 184.980478] Bluetooth: hci4: command tx timeout [ 185.044656] Bluetooth: hci5: command tx timeout [ 185.108666] Bluetooth: hci7: command tx timeout [ 185.300588] Bluetooth: hci6: command tx timeout [ 186.643501] Bluetooth: hci0: command tx timeout [ 186.643960] Bluetooth: hci1: command tx timeout [ 186.836494] Bluetooth: hci2: command tx timeout [ 186.899572] Bluetooth: hci3: command tx timeout [ 187.028788] Bluetooth: hci4: command tx timeout [ 187.091504] Bluetooth: hci5: command tx timeout [ 187.156469] Bluetooth: hci7: command tx timeout [ 187.347735] Bluetooth: hci6: command tx timeout [ 240.736352] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.739978] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.743148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.749698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.753630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.801117] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 240.809730] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 240.811779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 240.821092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 240.827343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.933307] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.937917] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.940775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.953125] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 240.957871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.023874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 241.045377] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.048203] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.052902] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.067855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 241.070213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 241.072375] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 241.076683] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 241.080219] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 241.086838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.090771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.097903] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 241.100878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 241.112179] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 241.151204] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 241.164802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 241.172666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 241.181756] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 241.191700] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 241.202303] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 241.224712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 241.257319] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 241.284156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 241.299039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 241.304035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.771495] Bluetooth: hci0: command tx timeout [ 242.900515] Bluetooth: hci1: command tx timeout [ 243.028539] Bluetooth: hci2: command tx timeout [ 243.219526] Bluetooth: hci5: command tx timeout [ 243.219554] Bluetooth: hci4: command tx timeout [ 243.220532] Bluetooth: hci3: command tx timeout [ 243.411663] Bluetooth: hci7: command tx timeout [ 243.476477] Bluetooth: hci6: command tx timeout [ 244.819537] Bluetooth: hci0: command tx timeout [ 244.948467] Bluetooth: hci1: command tx timeout [ 245.076630] Bluetooth: hci2: command tx timeout [ 245.267500] Bluetooth: hci3: command tx timeout [ 245.267595] Bluetooth: hci4: command tx timeout [ 245.267979] Bluetooth: hci5: command tx timeout [ 245.460644] Bluetooth: hci7: command tx timeout [ 245.524670] Bluetooth: hci6: command tx timeout [ 246.869516] Bluetooth: hci0: command tx timeout [ 246.995486] Bluetooth: hci1: command tx timeout [ 247.124582] Bluetooth: hci2: command tx timeout [ 247.316633] Bluetooth: hci5: command tx timeout [ 247.316711] Bluetooth: hci4: command tx timeout [ 247.317114] Bluetooth: hci3: command tx timeout [ 247.509421] Bluetooth: hci7: command tx timeout [ 247.572671] Bluetooth: hci6: command tx timeout [ 248.917177] Bluetooth: hci0: command tx timeout [ 249.045519] Bluetooth: hci1: command tx timeout [ 249.174827] Bluetooth: hci2: command tx timeout [ 249.364162] Bluetooth: hci3: command tx timeout [ 249.364308] Bluetooth: hci4: command tx timeout [ 249.365342] Bluetooth: hci5: command tx timeout [ 249.556613] Bluetooth: hci7: command tx timeout [ 249.619657] Bluetooth: hci6: command tx timeout [ 303.273203] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.277949] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.281496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.291897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.300553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.410007] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.413639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.416173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.423975] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.428207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.469522] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 303.472311] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 303.477934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 303.489197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 303.492763] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 303.542790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.553074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.576279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.594730] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.619686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.621471] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.624821] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.628177] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.647582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.694145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.705143] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.741450] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.742864] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 303.744489] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.747945] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.750086] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.755573] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 303.757221] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.759162] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 303.776956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.790843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.802191] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.851861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.854658] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.860170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.363702] Bluetooth: hci0: command tx timeout [ 305.491794] Bluetooth: hci1: command tx timeout [ 305.556494] Bluetooth: hci2: command tx timeout [ 305.683589] Bluetooth: hci3: command tx timeout [ 305.811566] Bluetooth: hci4: command tx timeout [ 305.875703] Bluetooth: hci7: command tx timeout [ 306.003751] Bluetooth: hci6: command tx timeout [ 306.067766] Bluetooth: hci5: command tx timeout [ 307.413354] Bluetooth: hci0: command tx timeout [ 307.539485] Bluetooth: hci1: command tx timeout [ 307.603700] Bluetooth: hci2: command tx timeout [ 307.731486] Bluetooth: hci3: command tx timeout [ 307.859567] Bluetooth: hci4: command tx timeout [ 307.924423] Bluetooth: hci7: command tx timeout [ 308.051645] Bluetooth: hci6: command tx timeout [ 308.115608] Bluetooth: hci5: command tx timeout [ 309.459633] Bluetooth: hci0: command tx timeout [ 309.587774] Bluetooth: hci1: command tx timeout [ 309.653801] Bluetooth: hci2: command tx timeout [ 309.779618] Bluetooth: hci3: command tx timeout [ 309.907465] Bluetooth: hci4: command tx timeout [ 309.971473] Bluetooth: hci7: command tx timeout [ 310.099892] Bluetooth: hci6: command tx timeout [ 310.163852] Bluetooth: hci5: command tx timeout [ 311.507649] Bluetooth: hci0: command tx timeout [ 311.635461] Bluetooth: hci1: command tx timeout [ 311.699941] Bluetooth: hci2: command tx timeout [ 311.827835] Bluetooth: hci3: command tx timeout [ 311.955778] Bluetooth: hci4: command tx timeout [ 312.019493] Bluetooth: hci7: command tx timeout [ 312.147859] Bluetooth: hci6: command tx timeout [ 312.211710] Bluetooth: hci5: command tx timeout [ 365.734189] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.740108] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.743221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.762925] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.773804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.073676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.091553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.094062] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.097851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.105901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.122822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.124747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.127886] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.133037] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.136786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.152036] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.158315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.160891] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 366.176313] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.182945] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.185992] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.196078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 366.199861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.201953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.261956] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.265628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 366.265849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.277292] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 366.296958] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 366.313199] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 366.330842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 366.337927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 366.344345] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 366.360962] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 366.377035] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 366.382935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 366.410838] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 366.417180] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 366.474202] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 366.478503] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 367.827533] Bluetooth: hci0: command tx timeout [ 368.211482] Bluetooth: hci1: command tx timeout [ 368.339741] Bluetooth: hci5: command tx timeout [ 368.340995] Bluetooth: hci3: command tx timeout [ 368.403663] Bluetooth: hci2: command tx timeout [ 368.467535] Bluetooth: hci6: command tx timeout [ 368.723472] Bluetooth: hci7: command tx timeout [ 368.989195] Bluetooth: hci4: command tx timeout [ 369.875566] Bluetooth: hci0: command tx timeout [ 370.259625] Bluetooth: hci1: command tx timeout [ 370.387469] Bluetooth: hci3: command tx timeout [ 370.387550] Bluetooth: hci5: command tx timeout [ 370.453417] Bluetooth: hci2: command tx timeout [ 370.515492] Bluetooth: hci6: command tx timeout [ 370.772580] Bluetooth: hci7: command tx timeout [ 371.027606] Bluetooth: hci4: command tx timeout [ 371.923849] Bluetooth: hci0: command tx timeout [ 372.309461] Bluetooth: hci1: command tx timeout [ 372.435495] Bluetooth: hci5: command tx timeout [ 372.435975] Bluetooth: hci3: command tx timeout [ 372.499516] Bluetooth: hci2: command tx timeout [ 372.563850] Bluetooth: hci6: command tx timeout [ 372.819630] Bluetooth: hci7: command tx timeout [ 373.077462] Bluetooth: hci4: command tx timeout [ 373.972454] Bluetooth: hci0: command tx timeout [ 374.355470] Bluetooth: hci1: command tx timeout [ 374.483524] Bluetooth: hci3: command tx timeout [ 374.483812] Bluetooth: hci5: command tx timeout [ 374.548538] Bluetooth: hci2: command tx timeout [ 374.611470] Bluetooth: hci6: command tx timeout [ 374.867597] Bluetooth: hci7: command tx timeout [ 375.124638] Bluetooth: hci4: command tx timeout VM DIAGNOSIS: 03:45:57 Registers: info registers vcpu 0 RAX=0000000011531a84 RBX=00000000479af9bd RCX=00000000b2cb5ae4 RDX=0000000000000012 RSI=ffff88803229f3a4 RDI=0000000000000003 RBP=0000000000000001 RSP=ffff88803229f2b8 R8 =00000000501effb7 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000092cc0 R14=ffff88803229f320 R15=0000000000000012 RIP=ffffffff825d9a67 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe5100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f34aebb0000 CR3=00000000354fd000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6f732e616d7a6c62696c2f756e672d78 XMM02=00352e6f732e616d7a6c62696c2f756e XMM03=672d78756e696c2d34365f3638782f62 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff81353c4d RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff888030d5ef38 R8 =0000000000000000 R9 =0000000000000000 R10=000000000003b67d R11=0000000000027b60 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=ffff888030d5f028 RIP=ffffffff81aec433 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3cb2690000 CR3=000000003265a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff000000000000000000000000000000 XMM02=00ff0000000000000000000000000000 XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000