Warning: Permanently added '[localhost]:62622' (ECDSA) to the list of known hosts.
2025/05/26 04:21:15 fuzzer started
2025/05/26 04:21:15 dialing manager at localhost:46087
syzkaller login: [  100.959598] cgroup: Unknown subsys name 'net'
[  101.099395] cgroup: Unknown subsys name 'cpuset'
[  101.143687] cgroup: Unknown subsys name 'rlimit'
2025/05/26 04:21:29 syscalls: 207
2025/05/26 04:21:29 code coverage: enabled
2025/05/26 04:21:29 comparison tracing: enabled
2025/05/26 04:21:29 extra coverage: enabled
2025/05/26 04:21:29 setuid sandbox: enabled
2025/05/26 04:21:29 namespace sandbox: enabled
2025/05/26 04:21:29 Android sandbox: enabled
2025/05/26 04:21:29 fault injection: enabled
2025/05/26 04:21:29 leak checking: enabled
2025/05/26 04:21:29 net packet injection: enabled
2025/05/26 04:21:29 net device setup: enabled
2025/05/26 04:21:29 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/26 04:21:29 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/26 04:21:29 USB emulation: enabled
2025/05/26 04:21:29 hci packet injection: enabled
2025/05/26 04:21:29 wifi device emulation: enabled
2025/05/26 04:21:29 802.15.4 emulation: enabled
2025/05/26 04:21:29 fetching corpus: 0, signal 0/0 (executing program)
2025/05/26 04:21:31 starting 8 fuzzer processes
04:21:31 executing program 0:
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x521000)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', <r1=>0x0, 0x2f, 0x9, 0x8, 0x1f, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x10, 0x81, 0x5617}})
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0x3, 0x400, 0x1000, 0x7, 0x87, "ad3cfc239d04f597ac75123e736545b88e2827", 0x5fe, 0xc0})
ioctl$KDSETMODE(r0, 0x4b3a, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x400d0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r3=>r1, 0x0, 0x1, 0x7f, 0x40, 0x10, @loopback, @private1, 0x8000, 0x8, 0x43, 0x2}})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x70, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x84890}, 0x1)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x44080)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000a}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6_vti0\x00', <r6=>r3, 0x4, 0x0, 0x5, 0xa0, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x20, 0x780, 0x0, 0x4}})
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r5, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000a00))
r7 = socket(0x5, 0x0, 0xfff)
sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x5)
ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000b40)=""/167)

04:21:31 executing program 1:
ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x91)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040))
ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000080)={0x0, 0xda7, 0x3, 0xbe, 0x1})
ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f00000000c0)=""/4096)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x401)
ioctl$TCSBRKP(r1, 0x5425, 0x10000)
r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x7)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001180)={0x4c, 0x0, &(0x7f00000010c0)=[@acquire_done={0x40106309, 0x1}, @decrefs={0x40046307, 0x2}, @increfs_done, @enter_looper, @request_death, @decrefs={0x40046307, 0x2}], 0x9, 0x0, &(0x7f0000001140)="4436e9896178a6988f"})
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000011c0)={0xffff0000, 0x80, 0x4, 0x7, 0x1, "f29a6dbeda70dba75d840478ec6932c70e2aa7", 0x1, 0x10001})
ioctl$TIOCSCTTY(r1, 0x540e, 0x8)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000140}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1)
ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000001300))
ioctl$KDSETMODE(r0, 0x4b3a, 0x1)
ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000001340))
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000001380)={0xffff, 0x7fff, 0x7, 0x8, 0x0, "2858400ed4a0dae9"})
ioctl$VT_RELDISP(r1, 0x5605)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f00000013c0)=0x2)
ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000001400)=0x2)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x20004810)

04:21:31 executing program 2:
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xa, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x40)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2b9e}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8811}, 0x40000)
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd76}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x50)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4004001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40044840}, 0x15)
r3 = syz_open_dev$vcsn(&(0x7f0000000600), 0x7fff, 0x20080)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000041)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000780))
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x37da8c748873a2ec)
sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a00), r2)
sendmsg$NL802154_CMD_SET_LBT_MODE(r2, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2400c400}, 0x80)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r3)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x44, r6, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x80}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x60}, 0x8000)
sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x480b)

04:21:31 executing program 3:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c00}, 0x4088080)
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x29c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x134, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}, @NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9a6158664162050748a20b84f86af84f"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_KEY={0xf8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2b}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ad6d43805101f4ae9204f5219f6659a11c49e656aff6f0386e55968a944befe4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a203841f428bcc0e59a207f89e4cb950"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "9bef5d998062bf0347069ee85827ad3620339f1d822a51fc32da9ded8d620d6b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "dd88fc838e464586de68312ebfc713e1"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2dfd0e8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8001}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2427}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfe}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x29c}, 0x1, 0x0, 0x0, 0x4}, 0x40)
r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xb3)
ioctl$TCFLSH(r1, 0x540b, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000004c0), 0x2100, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000500))
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000540))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4010)
ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000700))
munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x38, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r3, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r5 = syz_open_pts(r1, 0x5a040)
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000940)=0x200)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r4)
sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x54}, 0x1, 0x0, 0x0, 0x4800}, 0x0)

[  116.388205] audit: type=1400 audit(1748233291.190:7): avc:  denied  { execmem } for  pid=275 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
04:21:31 executing program 4:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x10000, 0x10400)
ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0)
ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x50000)
ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000080))
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000200))
ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000240))
r2 = syz_open_dev$vcsn(&(0x7f0000000280), 0x8, 0x0)
ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000002c0))
r3 = syz_open_dev$vcsn(&(0x7f0000000300), 0xffffffffda5ccf50, 0x400000)
ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000340)={0x2e, ""/46})
r4 = fsmount(r3, 0x0, 0xe0)
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000380))
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f00000003c0)={0xae, ""/174})
r5 = fsmount(r3, 0x1, 0x72)
ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f0000000480))
ioctl$TCSETS2(r5, 0x402c542b, &(0x7f00000004c0)={0x9, 0x7, 0x5, 0x3, 0x40, "5db6d27cbd652313201b8270d920e54500f0cb", 0x6, 0xbef})
ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000500))

04:21:31 executing program 5:
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000))
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040))
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000080))
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2, 0x0)
ioctl$TIOCEXCL(r0, 0x540c)
r1 = syz_open_pts(r0, 0x842)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000100))
ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000140)=""/216)
r2 = syz_open_pts(r0, 0xa000)
ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000240)={0x10000, 0x8})
r3 = fsmount(0xffffffffffffffff, 0x0, 0x7a)
ioctl$TIOCSCTTY(r3, 0x540e, 0x81)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x284c40, 0x0)
r4 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x6, 0x86200)
ioctl$TIOCMBIC(r4, 0x5417, &(0x7f0000000300)=0xc6c1)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', <r5=>0x0, 0x4, 0x0, 0x3, 0x7ff, 0x9, @remote, @local, 0x0, 0x0, 0x401, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r5, 0x29, 0x0, 0x4, 0x9, 0x28, @mcast1, @mcast2, 0x7800, 0x7, 0x8, 0x1}})
ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f00000004c0)="3ed4d656c1")
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x16)

04:21:31 executing program 6:
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20001045}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x844)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1f4, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fff}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xd098}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x100000000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9c}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_SEC_DEVKEY={0xe4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd20}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80000001}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x80}, 0x40040)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan0\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0xc805}, 0x40)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xe6831cb72f3eda73}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48011}, 0x8000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="3377a848f027"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x8864)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000840)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x44)
syz_open_dev$sg(&(0x7f0000000940), 0x8000, 0x10200)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4080)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0xb8, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x28, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0x9}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x40800)
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x9040)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc010}, 0x4004040)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), r1)
sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x64, r6, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_OPT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044}, 0x80)

04:21:31 executing program 7:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', <r2=>0x0, 0x2f, 0xff, 0x5, 0x800, 0x44, @private1, @loopback, 0x700, 0x80, 0x800, 0xd628}})
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000500)={0x3, 0x1, 0x18, 0x19, 0x18b, &(0x7f0000000100)})
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x200)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000540)={0x0, 0x80, 0xfffb, 0x1, 0x0, "230b3adbc6c76cfd"})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x101040, 0x0)
ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000005c0))
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_open_pts(r3, 0x4000)
ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000600)={0xd, 0x2})
ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000640))
ioctl$KDGKBENT(r5, 0x4b46, &(0x7f0000000680)={0x7, 0x3, 0xb33c})
r6 = syz_open_dev$sg(&(0x7f00000006c0), 0x82b, 0x400)
ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x3)
set_robust_list(&(0x7f0000000800)={&(0x7f0000000740)={&(0x7f0000000700)}, 0x2, &(0x7f00000007c0)={&(0x7f0000000780)}}, 0x18)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000840))
r7 = fsmount(0xffffffffffffffff, 0x1, 0x89)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r7, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4045}, 0x40)

[  117.854590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  117.856012] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  117.858404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  117.862005] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  117.864749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  117.919652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  117.927508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  117.932906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  117.935625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  117.938210] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  117.942149] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  117.949707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  117.953783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  117.956417] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  117.957486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  118.021984] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  118.026387] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  118.042029] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  118.053535] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  118.055696] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  118.057749] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  118.059250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  118.061355] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  118.062940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  118.065532] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  118.069126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  118.071333] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  118.074340] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  118.079724] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  118.081411] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  118.083206] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  118.091987] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  118.103043] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  118.106099] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  118.121433] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  118.170753] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  118.190479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  118.201431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  118.233616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  118.244405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  119.888080] Bluetooth: hci0: command tx timeout
[  120.014990] Bluetooth: hci1: command tx timeout
[  120.015571] Bluetooth: hci2: command tx timeout
[  120.143056] Bluetooth: hci7: command tx timeout
[  120.143741] Bluetooth: hci6: command tx timeout
[  120.144608] Bluetooth: hci3: command tx timeout
[  120.207297] Bluetooth: hci4: command tx timeout
[  120.334982] Bluetooth: hci5: command tx timeout
[  121.935859] Bluetooth: hci0: command tx timeout
[  122.063186] Bluetooth: hci2: command tx timeout
[  122.063636] Bluetooth: hci1: command tx timeout
[  122.191367] Bluetooth: hci6: command tx timeout
[  122.192051] Bluetooth: hci3: command tx timeout
[  122.192469] Bluetooth: hci7: command tx timeout
[  122.255018] Bluetooth: hci4: command tx timeout
[  122.382936] Bluetooth: hci5: command tx timeout
[  123.982969] Bluetooth: hci0: command tx timeout
[  124.111446] Bluetooth: hci2: command tx timeout
[  124.112145] Bluetooth: hci1: command tx timeout
[  124.239128] Bluetooth: hci6: command tx timeout
[  124.239596] Bluetooth: hci7: command tx timeout
[  124.240062] Bluetooth: hci3: command tx timeout
[  124.304934] Bluetooth: hci4: command tx timeout
[  124.431158] Bluetooth: hci5: command tx timeout
[  126.032097] Bluetooth: hci0: command tx timeout
[  126.159188] Bluetooth: hci2: command tx timeout
[  126.159228] Bluetooth: hci1: command tx timeout
[  126.287570] Bluetooth: hci6: command tx timeout
[  126.287609] Bluetooth: hci3: command tx timeout
[  126.288057] Bluetooth: hci7: command tx timeout
[  126.352020] Bluetooth: hci4: command tx timeout
[  126.478946] Bluetooth: hci5: command tx timeout
[  180.649177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  180.650835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  180.652253] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  180.654162] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  180.655349] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  180.657367] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  180.662670] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  180.664063] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  180.668131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  180.669325] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.712054] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  180.716722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  180.721007] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  180.741089] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  180.742346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  180.745463] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  180.755159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  180.768393] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  180.781798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  180.810384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  180.822837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  180.825174] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  180.826588] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  180.832248] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  180.837739] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  180.925600] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  180.934468] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  180.937153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  180.959807] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  180.972400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  181.237079] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  181.237580] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  181.259722] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  181.314373] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  181.335105] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  181.343736] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  181.386853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  181.391579] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  181.399419] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  181.416552] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  182.735096] Bluetooth: hci1: command tx timeout
[  182.735228] Bluetooth: hci0: command tx timeout
[  182.799985] Bluetooth: hci2: command tx timeout
[  182.864062] Bluetooth: hci3: command tx timeout
[  182.929114] Bluetooth: hci4: command tx timeout
[  183.055014] Bluetooth: hci6: command tx timeout
[  183.631998] Bluetooth: hci7: command tx timeout
[  183.694983] Bluetooth: hci5: command tx timeout
[  184.783124] Bluetooth: hci1: command tx timeout
[  184.784369] Bluetooth: hci0: command tx timeout
[  184.847342] Bluetooth: hci2: command tx timeout
[  184.911343] Bluetooth: hci3: command tx timeout
[  184.975927] Bluetooth: hci4: command tx timeout
[  185.103438] Bluetooth: hci6: command tx timeout
[  185.679806] Bluetooth: hci7: command tx timeout
[  185.743906] Bluetooth: hci5: command tx timeout
[  186.830964] Bluetooth: hci0: command tx timeout
[  186.831472] Bluetooth: hci1: command tx timeout
[  186.894952] Bluetooth: hci2: command tx timeout
[  186.959150] Bluetooth: hci3: command tx timeout
[  187.022952] Bluetooth: hci4: command tx timeout
[  187.150950] Bluetooth: hci6: command tx timeout
[  187.727038] Bluetooth: hci7: command tx timeout
[  187.791013] Bluetooth: hci5: command tx timeout
[  188.879034] Bluetooth: hci0: command tx timeout
[  188.879071] Bluetooth: hci1: command tx timeout
[  188.943062] Bluetooth: hci2: command tx timeout
[  189.007106] Bluetooth: hci3: command tx timeout
[  189.072911] Bluetooth: hci4: command tx timeout
[  189.199024] Bluetooth: hci6: command tx timeout
[  189.775128] Bluetooth: hci7: command tx timeout
[  189.838953] Bluetooth: hci5: command tx timeout
[  242.851028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  242.857535] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  242.862620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  242.876435] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  242.882734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  242.944322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  242.949921] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  242.953851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  242.980375] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  242.989511] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.035033] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.042540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.046304] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.058206] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.063941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.118298] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.132701] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.137493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.163645] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.187768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.427419] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.453178] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.477314] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.502730] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  243.504254] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.513267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  243.523026] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  243.525774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  243.529775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  243.532060] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  243.541359] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  243.548572] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  243.555673] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  243.561810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  243.599481] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  243.623143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  243.625811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  243.636134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  243.657672] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  243.696138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  244.943251] Bluetooth: hci0: command tx timeout
[  245.071890] Bluetooth: hci1: command tx timeout
[  245.134956] Bluetooth: hci2: command tx timeout
[  245.263155] Bluetooth: hci3: command tx timeout
[  245.646992] Bluetooth: hci7: command tx timeout
[  245.647385] Bluetooth: hci4: command tx timeout
[  245.776186] Bluetooth: hci5: command tx timeout
[  245.776405] Bluetooth: hci6: command tx timeout
[  246.991144] Bluetooth: hci0: command tx timeout
[  247.119000] Bluetooth: hci1: command tx timeout
[  247.184472] Bluetooth: hci2: command tx timeout
[  247.314185] Bluetooth: hci3: command tx timeout
[  247.694966] Bluetooth: hci7: command tx timeout
[  247.695008] Bluetooth: hci4: command tx timeout
[  247.823141] Bluetooth: hci5: command tx timeout
[  247.824350] Bluetooth: hci6: command tx timeout
[  249.039126] Bluetooth: hci0: command tx timeout
[  249.167186] Bluetooth: hci1: command tx timeout
[  249.232050] Bluetooth: hci2: command tx timeout
[  249.361080] Bluetooth: hci3: command tx timeout
[  249.743271] Bluetooth: hci4: command tx timeout
[  249.743311] Bluetooth: hci7: command tx timeout
[  249.871048] Bluetooth: hci6: command tx timeout
[  249.871552] Bluetooth: hci5: command tx timeout
[  251.086970] Bluetooth: hci0: command tx timeout
[  251.215942] Bluetooth: hci1: command tx timeout
[  251.279481] Bluetooth: hci2: command tx timeout
[  251.408164] Bluetooth: hci3: command tx timeout
[  251.791022] Bluetooth: hci4: command tx timeout
[  251.791167] Bluetooth: hci7: command tx timeout
[  251.918958] Bluetooth: hci6: command tx timeout
[  251.919453] Bluetooth: hci5: command tx timeout
[  305.192478] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  305.199403] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  305.204319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  305.216591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  305.222162] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  305.277210] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  305.282840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  305.286830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  305.297027] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  305.304387] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  305.410835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  305.414431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  305.417525] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  305.428232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  305.433505] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  305.635278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.664451] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.701964] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  305.719424] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  305.720319] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.724409] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  305.730771] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  305.735504] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  305.737679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  305.743402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.747708] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.750567] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.753105] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  305.761373] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  305.765471] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  305.769927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.773399] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  305.776681] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  305.784409] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  305.794267] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.796672] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  305.811867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.819105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.862416] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  305.901421] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  307.279438] Bluetooth: hci0: command tx timeout
[  307.344631] Bluetooth: hci1: command tx timeout
[  307.664027] Bluetooth: hci2: command tx timeout
[  307.919986] Bluetooth: hci5: command tx timeout
[  307.921564] Bluetooth: hci4: command tx timeout
[  307.984034] Bluetooth: hci7: command tx timeout
[  308.047050] Bluetooth: hci6: command tx timeout
[  308.048068] Bluetooth: hci3: command tx timeout
[  309.329922] Bluetooth: hci0: command tx timeout
[  309.391974] Bluetooth: hci1: command tx timeout
[  309.711016] Bluetooth: hci2: command tx timeout
[  309.969232] Bluetooth: hci4: command tx timeout
[  309.969725] Bluetooth: hci5: command tx timeout
[  310.031064] Bluetooth: hci7: command tx timeout
[  310.095031] Bluetooth: hci6: command tx timeout
[  310.095515] Bluetooth: hci3: command tx timeout
[  311.376208] Bluetooth: hci0: command tx timeout
[  311.440886] Bluetooth: hci1: command tx timeout
[  311.760158] Bluetooth: hci2: command tx timeout
[  312.015004] Bluetooth: hci5: command tx timeout
[  312.015485] Bluetooth: hci4: command tx timeout
[  312.080063] Bluetooth: hci7: command tx timeout
[  312.144192] Bluetooth: hci6: command tx timeout
[  312.144685] Bluetooth: hci3: command tx timeout
[  313.424895] Bluetooth: hci0: command tx timeout
[  313.488104] Bluetooth: hci1: command tx timeout
[  313.806970] Bluetooth: hci2: command tx timeout
[  314.062969] Bluetooth: hci5: command tx timeout
[  314.063467] Bluetooth: hci4: command tx timeout
[  314.127930] Bluetooth: hci7: command tx timeout
[  314.191066] Bluetooth: hci3: command tx timeout
[  314.191499] Bluetooth: hci6: command tx timeout
[  367.647980] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  367.653332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  367.661664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  367.670410] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  367.676533] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  367.844294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  367.856339] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  367.859700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  367.870852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  367.877789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  367.947367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  367.970593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  367.975632] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  368.003558] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  368.010766] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  368.066377] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  368.074452] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  368.080000] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  368.085450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  368.088763] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  368.097404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  368.104409] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  368.132620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  368.154815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  368.160485] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  368.178500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  368.194037] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  368.196151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  368.210494] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  368.221496] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  368.235502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  368.241747] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  368.255623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  368.274015] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  368.299608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  368.314417] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  368.316594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  368.361455] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  368.370411] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  368.389403] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  369.744943] Bluetooth: hci0: command tx timeout
[  369.935264] Bluetooth: hci1: command tx timeout
[  370.063073] Bluetooth: hci2: command tx timeout
[  370.254967] Bluetooth: hci4: command tx timeout
[  370.319996] Bluetooth: hci3: command tx timeout
[  370.511379] Bluetooth: hci5: command tx timeout
[  370.575939] Bluetooth: hci6: command tx timeout
[  370.576666] Bluetooth: hci7: command tx timeout
[  371.790962] Bluetooth: hci0: command tx timeout
[  371.982932] Bluetooth: hci1: command tx timeout
[  372.110958] Bluetooth: hci2: command tx timeout
[  372.302941] Bluetooth: hci4: command tx timeout
[  372.366963] Bluetooth: hci3: command tx timeout
[  372.559941] Bluetooth: hci5: command tx timeout
[  372.623510] Bluetooth: hci7: command tx timeout
[  372.625695] Bluetooth: hci6: command tx timeout
[  373.839177] Bluetooth: hci0: command tx timeout
[  374.032209] Bluetooth: hci1: command tx timeout
[  374.158946] Bluetooth: hci2: command tx timeout
[  374.350956] Bluetooth: hci4: command tx timeout
[  374.414971] Bluetooth: hci3: command tx timeout
[  374.607897] Bluetooth: hci5: command tx timeout
[  374.670974] Bluetooth: hci6: command tx timeout
[  374.671469] Bluetooth: hci7: command tx timeout
[  375.889110] Bluetooth: hci0: command tx timeout
[  376.079103] Bluetooth: hci1: command tx timeout
[  376.207182] Bluetooth: hci2: command tx timeout
[  376.398996] Bluetooth: hci4: command tx timeout
[  376.462959] Bluetooth: hci3: command tx timeout
[  376.655080] Bluetooth: hci5: command tx timeout
[  376.719141] Bluetooth: hci7: command tx timeout
[  376.719632] Bluetooth: hci6: command tx timeout

VM DIAGNOSIS:
04:26:33  Registers:
info registers vcpu 0
RAX=0000000007b20178 RBX=ffff88800aeafbc0 RCX=ffff88800d223d90 RDX=000000000000000d
RSI=0000000062428909 RDI=ffffffff81000130 RBP=ffff888035fc77c8 RSP=ffff888035fc7720
R8 =0000000079948cb4 R9 =ffff88806c6f5600 R10=0000000000000001 R11=0000000000000000
R12=ffff888009405c80 R13=ffffea00009fc500 R14=0000000000000000 R15=ffff888027f14640
RIP=ffffffff815c0db8 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4300000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5cbd6b48e0 CR3=000000001ceb5000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=756e696c2d34365f3638782f62696c2f XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000010 RBX=0000000000000010 RCX=ffffffff818c9c24 RDX=0000000000000011
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffea0001b39834 RSP=ffff8880308dfaf0
R8 =0000000000000001 R9 =fffff94000367306 R10=0000000000000010 R11=0000000000000001
R12=0000000000000001 R13=0000000000000010 R14=0000000000000000 R15=ffff8880308dfd88
RIP=ffffffff81737d18 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f3983b33820 CR3=000000002b3bd000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00362e6f732e6362696c2f756e672d78
XMM02=ffff0000000000ffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000