Warning: Permanently added '[localhost]:62965' (ECDSA) to the list of known hosts.
2025/05/30 21:17:42 fuzzer started
2025/05/30 21:17:42 dialing manager at localhost:34361
syzkaller login: [  109.436583] cgroup: Unknown subsys name 'net'
[  109.615905] cgroup: Unknown subsys name 'cpuset'
[  109.659272] cgroup: Unknown subsys name 'rlimit'
2025/05/30 21:18:06 syscalls: 202
2025/05/30 21:18:06 code coverage: enabled
2025/05/30 21:18:06 comparison tracing: enabled
2025/05/30 21:18:06 extra coverage: enabled
2025/05/30 21:18:06 setuid sandbox: enabled
2025/05/30 21:18:06 namespace sandbox: enabled
2025/05/30 21:18:06 Android sandbox: enabled
2025/05/30 21:18:06 fault injection: enabled
2025/05/30 21:18:06 leak checking: enabled
2025/05/30 21:18:06 net packet injection: enabled
2025/05/30 21:18:06 net device setup: enabled
2025/05/30 21:18:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2025/05/30 21:18:06 devlink PCI setup: PCI device 0000:00:10.0 is not available
2025/05/30 21:18:06 USB emulation: enabled
2025/05/30 21:18:06 hci packet injection: enabled
2025/05/30 21:18:06 wifi device emulation: enabled
2025/05/30 21:18:06 802.15.4 emulation: enabled
2025/05/30 21:18:06 fetching corpus: 0, signal 0/0 (executing program)
2025/05/30 21:18:07 starting 8 fuzzer processes
21:18:07 executing program 0:
sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000002c0)={&(0x7f0000000040)={0x260, 0x0, 0x200, 0x70bd27, 0x3ff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff0001}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0x24, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x14c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x92d, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6c3d}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @remote, 0x2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x37dd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
clone3(&(0x7f0000000800)={0x88022000, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)=<r0=>0x0, {}, &(0x7f0000000640)=""/129, 0x81, &(0x7f0000000700)=""/156, &(0x7f00000007c0)=[0x0], 0x1}, 0x58)
clone3(&(0x7f00000008c0)={0x20000000, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400), {0x13}, &(0x7f0000000440)=""/64, 0x40, &(0x7f0000000480)=""/209, &(0x7f0000000880)=[0xffffffffffffffff, r0], 0x2}, 0x58)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x38, r1, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xd0}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000000}, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5879}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008001}, 0x20)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c00)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r1, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044081}, 0x40004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000d40), r2)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000e00)={'wpan3\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000e40)={'wpan3\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x2000c040)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r2)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000001140)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)={0x108, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0xd8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c6457707cf4e0b9a0b0af744d2ffebad"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3076507f8a5b035c5900b0d2ae15393e473e6276315aa4903ebe27a6df393d6d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2bfe2d5718b7f2c84d6b2fa4e522f94b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dda16714f432d3ca9410cf34374ef89b147a716ded858643d0ee53d8a8866c97"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x85}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4579de7619bcd24fa8066b2cd6c09741e24ffbcc99e119496fb1d2578b6d10c2"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9fca07701e1b4304630dd0483bfc9de2"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4cbf2f18fcb527bb288470fbaec92730d783ae0e2c204d91bfb62561ca6dd20c"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0xc080)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000011c0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001200)={'wpan3\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2080482}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x5c, 0x0, 0x311, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

21:18:07 executing program 1:
msgctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/207)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
msgsnd(0xffffffffffffffff, &(0x7f0000000140)={0x2, "c274f318f3a8fecd644d49691e119cd8c9e9b05bd29483e84d4d06495895488adbbd7bee47c0dc9349e77189d0803e9134d97304abfba520"}, 0x40, 0x0)
msgget(0x3, 0x2)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
clone3(&(0x7f0000000340)={0x108004200, &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000240), {0x30}, &(0x7f0000000280)=""/7, 0x7, &(0x7f00000002c0)=""/52, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)
clone3(&(0x7f00000005c0)={0x10001000, &(0x7f00000003c0), &(0x7f0000000400)=<r4=>0x0, &(0x7f0000000440), {0x36}, &(0x7f0000000480)=""/53, 0x35, &(0x7f00000004c0)=""/178, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x6}, 0x58)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xffc89ddad2f42fa3}, 0x844)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000004)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r2)
sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x5c, r6, 0x110, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xdbe9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008800}, 0x20000000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000b80)={'wpan0\x00', <r7=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c00)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x74, 0x0, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x74}}, 0x20000000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x44, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xb7f}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4)
openat$cgroup_ro(r2, &(0x7f0000000e80)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0)

21:18:08 executing program 2:
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x44000)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000)
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaf08}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffff7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x11}, 0x4000001)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x200240, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
prctl$PR_SVE_GET_VL(0x33, 0x2040)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), r1)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000004c0)={'wpan3\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r3, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4095}, 0x80)
write$snapshot(0xffffffffffffffff, &(0x7f0000000600)="8f876fb4bc6282ae9226ff5c7f2dda8093386d1a851c1c9ce4a300f658968f0ca8a67bdcf07e0b1d73b3f8bd64b5a30232da7965a0cefbbc7a1ac193b3bed94ca412a0e57b6c3218a0ab116a6e4060a63ad8631613ca9c214ff1957e625f137aafa5d7f8ae82514e457533e7d64e2ea900d6725cbaa617a66f7f68931f2df2544336fefacaafac218f118ca7c0dc5a7991db42e43600699cd40278d67ba1ca01604036ced8ea771cd61b181184c759831bc2c30ccb2c350aedd2150ce0bed95904f2ca3992bd69fbf336afdadf1cc885e4cfd962fb36ce4fc6e8bb49ba9d2cbb41353201bf9a60c50017213aaa0fe10a02d162e418010342", 0xf8)
sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, r0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
pselect6(0x40, &(0x7f0000000800)={0x20, 0x8, 0x80000000, 0x3, 0x3f, 0x97d, 0x40, 0xffffffffffffffff}, &(0x7f0000000840)={0x100, 0x3, 0x10000, 0x1, 0x7, 0x7, 0x5, 0x20}, &(0x7f0000000880)={0x8, 0xa4e, 0x2, 0x3, 0xfffffffffffff486, 0x8, 0x7f, 0xa0}, &(0x7f00000008c0)={0x77359400}, &(0x7f0000000940)={&(0x7f0000000900)={[0x20000000000000]}, 0x8})
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f80)={&(0x7f00000009c0)={0x594, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x578, 0x8, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x490, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xac, @mcast2, 0xf2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f012de822130d81402895e47ae1c4c58453a5ccbddb3c93ecbc3bbfac3c7384d"}, @WGPEER_A_ALLOWEDIPS={0x3cc, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x58}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xc}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0xef}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x9, @empty, 0x4}}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @private1, 0x1000}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffa}]}]}]}, 0x594}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0xf124)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

[  134.706226] audit: type=1400 audit(1748639888.052:7): avc:  denied  { execmem } for  pid=283 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
21:18:08 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r1=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xf}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0xc3d31955c7282d5d}, 0x4044840)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1c010}, 0x40000)
sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004021}, 0x40)
r3 = getpid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x164, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x2c, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x480000}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3b5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40040}, 0x40814)
clone3(&(0x7f0000000b00)={0x40000, &(0x7f0000000880)=<r4=>0xffffffffffffffff, &(0x7f00000008c0)=<r5=>0x0, &(0x7f0000000900), {0x22}, &(0x7f0000000940)=""/96, 0x60, &(0x7f00000009c0)=""/253, &(0x7f0000000ac0)=[r3], 0x1}, 0x58)
ptrace(0x10, r5)
getpid()
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000b80)={0x2ba2c3d6}, 0x4)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
pidfd_send_signal(r4, 0x34, &(0x7f0000000cc0)={0x3a, 0xffffffff, 0x9}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5a}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4c00)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan3\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x50, r2, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000fc0)={0x7ff}, 0x4)

21:18:08 executing program 4:
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x40)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r0=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000804)
clock_getres(0x3, &(0x7f0000000280))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x1f}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20004001)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x128, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x100, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7d4}, @NL802154_DEVKEY_ATTR_ID={0x74, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8e4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xd55d}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x128}, 0x1, 0x0, 0x0, 0x24000851}, 0x4040000)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r3=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x50a, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008880}, 0x24008001)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x30}, 0x4000)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x44041)
sendmsg$NL802154_CMD_SET_CHANNEL(r4, 0xfffffffffffffffd, 0x20000000)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000980), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x58}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xbc92faa92558ab8e)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000b00)={'wpan3\x00', <r7=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x68, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8880}, 0x4000)

21:18:08 executing program 5:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x20000010)
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80)
syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8001)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6d}, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x4001)
r2 = accept4(r1, &(0x7f0000000600)=@rc, &(0x7f0000000680)=0x80, 0x80800)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc480}, 0x81)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xdfe9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x2004c840)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2)
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4172}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x801)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wpan3\x00', <r4=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000bc0)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000084)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x40, r7, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0xea}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)

21:18:08 executing program 6:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x80)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r2 = pidfd_getfd(r1, r1, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, 0x0, 0x33b, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000)
ioctl$SNAPSHOT_FREE(r0, 0x3305)
socketpair(0x22, 0x3, 0x2, &(0x7f0000000400)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', r4, 0x700, 0x30, 0x8, 0x1021, {{0xe, 0x4, 0x0, 0x5, 0x38, 0x67, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x14, 0x2d, 0x1, 0x2, [{@broadcast, 0xf1d}, {@local, 0x20}]}, @cipso={0x86, 0x10, 0x3, [{0x1, 0x4, "c8f0"}, {0x7, 0x6, "ee6c996d"}]}]}}}}})
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0)
ioctl$SNAPSHOT_CREATE_IMAGE(r5, 0x40043311, &(0x7f0000000580))
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x10c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x38}]}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x738}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf86}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x24044007}, 0x800)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000007c0)={0x77, 0x3, 0x8001, "cfe385cb9de136edb80894ec1f82486c1c7784f48efda59b45657c600cb44b5adef62ad41751564a8d84124f64baf25bc36b459527afd0166c33ecc4d7db5e34543eb1339482181a1af65f42eef7cea04833f089d3b7a427acfc2ac2cb533aff4bc9394864029559da810a1ad8dce7d0fc57ed9b1ab5aa"})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c000)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc001)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a80), 0x404001, 0x0)
ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x135b}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8081}, 0x8000)

21:18:08 executing program 7:
msgrcv(0x0, &(0x7f0000000000)={0x0, ""/119}, 0x7f, 0x1, 0x3800)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/49)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000000c0)=""/36)
msgget(0x0, 0x6a4)
r0 = msgget(0x3, 0x400)
msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000100)=""/184)
msgctl$MSG_INFO(r0, 0xc, &(0x7f00000001c0)=""/43)
sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48004}, 0x4000001)
r1 = msgget$private(0x0, 0x18)
msgctl$IPC_RMID(r1, 0x0)
r2 = msgget$private(0x0, 0x708)
msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000340)=""/189)
msgrcv(r2, &(0x7f0000000400)={0x0, ""/162}, 0xaa, 0x2, 0x1000)
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000004c0)=""/129)
getresuid(&(0x7f0000000580)=<r3=>0x0, &(0x7f00000005c0), &(0x7f0000000600))
getgroups(0x2, &(0x7f0000000680)=[0xee00, <r4=>0xffffffffffffffff])
msgctl$IPC_SET(r0, 0x1, &(0x7f00000006c0)={{0x3, r3, r4, 0xee01, 0xee00, 0x23, 0x8}, 0x0, 0x0, 0xe5c, 0x7, 0x7fffffff, 0x10000000, 0xffffffff, 0x4, 0xe5, 0x8001, 0xffffffffffffffff})
msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000740)=""/178)
r5 = msgget$private(0x0, 0x10)
msgctl$MSG_STAT_ANY(r5, 0xd, &(0x7f0000000800)=""/246)

[  136.234240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  136.237278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  136.240152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  136.242219] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  136.244834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  136.248916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  136.259351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  136.261154] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  136.271248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  136.289102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.293733] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  136.306685] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.315575] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.317272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.326668] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.330931] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  136.334013] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  136.335333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  136.353131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  136.363701] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  136.370866] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  136.373842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  136.380780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  136.383590] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  136.385231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  136.388517] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  136.388999] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  136.390447] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  136.393073] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  136.394930] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  136.396331] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  136.404919] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  136.407315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  136.409588] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  136.414565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  136.422880] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  136.439153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  136.443125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  136.463929] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  136.468100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  138.313171] Bluetooth: hci0: command tx timeout
[  138.375519] Bluetooth: hci1: command tx timeout
[  138.439662] Bluetooth: hci6: command tx timeout
[  138.441118] Bluetooth: hci2: command tx timeout
[  138.442162] Bluetooth: hci3: command tx timeout
[  138.503777] Bluetooth: hci4: command tx timeout
[  138.504782] Bluetooth: hci5: command tx timeout
[  138.567786] Bluetooth: hci7: command tx timeout
[  140.359572] Bluetooth: hci0: command tx timeout
[  140.423882] Bluetooth: hci1: command tx timeout
[  140.488027] Bluetooth: hci6: command tx timeout
[  140.489241] Bluetooth: hci2: command tx timeout
[  140.489313] Bluetooth: hci3: command tx timeout
[  140.551564] Bluetooth: hci5: command tx timeout
[  140.551648] Bluetooth: hci4: command tx timeout
[  140.616539] Bluetooth: hci7: command tx timeout
[  142.407959] Bluetooth: hci0: command tx timeout
[  142.472007] Bluetooth: hci1: command tx timeout
[  142.537492] Bluetooth: hci3: command tx timeout
[  142.538482] Bluetooth: hci6: command tx timeout
[  142.539341] Bluetooth: hci2: command tx timeout
[  142.599557] Bluetooth: hci4: command tx timeout
[  142.600863] Bluetooth: hci5: command tx timeout
[  142.663532] Bluetooth: hci7: command tx timeout
[  144.455515] Bluetooth: hci0: command tx timeout
[  144.519922] Bluetooth: hci1: command tx timeout
[  144.583654] Bluetooth: hci2: command tx timeout
[  144.586411] Bluetooth: hci6: command tx timeout
[  144.586839] Bluetooth: hci3: command tx timeout
[  144.647829] Bluetooth: hci5: command tx timeout
[  144.648288] Bluetooth: hci4: command tx timeout
[  144.711589] Bluetooth: hci7: command tx timeout
[  196.293230] syz-executor.7 (296) used greatest stack depth: 24912 bytes left
[  196.326464] syz-executor.4 (293) used greatest stack depth: 24512 bytes left
[  198.493023] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  198.498881] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  198.502985] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  198.514317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  198.523245] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  198.638186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  198.642977] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  198.646036] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  198.653125] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  198.654686] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  198.669953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  198.671143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  198.686854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.690471] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  198.712766] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  198.719593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  198.719921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  198.732672] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  198.762840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  198.770075] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  198.781926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  198.783846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  198.800512] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  198.806977] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  198.817705] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  198.834506] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  198.839565] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  198.844839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  198.847325] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  198.847923] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  198.858189] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  198.861628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  198.863302] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  198.909241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  198.925889] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  199.343795] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  199.362880] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  199.365968] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  199.428255] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  199.505935] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  200.584427] Bluetooth: hci0: command tx timeout
[  200.775742] Bluetooth: hci2: command tx timeout
[  200.841404] Bluetooth: hci1: command tx timeout
[  200.967526] Bluetooth: hci6: command tx timeout
[  201.032508] Bluetooth: hci4: command tx timeout
[  201.033146] Bluetooth: hci5: command tx timeout
[  201.096512] Bluetooth: hci3: command tx timeout
[  201.672625] Bluetooth: hci7: command tx timeout
[  202.631503] Bluetooth: hci0: command tx timeout
[  202.823542] Bluetooth: hci2: command tx timeout
[  202.888446] Bluetooth: hci1: command tx timeout
[  203.016093] Bluetooth: hci6: command tx timeout
[  203.080599] Bluetooth: hci5: command tx timeout
[  203.081742] Bluetooth: hci4: command tx timeout
[  203.143627] Bluetooth: hci3: command tx timeout
[  203.720186] Bluetooth: hci7: command tx timeout
[  204.679464] Bluetooth: hci0: command tx timeout
[  204.871473] Bluetooth: hci2: command tx timeout
[  204.935903] Bluetooth: hci1: command tx timeout
[  205.063625] Bluetooth: hci6: command tx timeout
[  205.128588] Bluetooth: hci5: command tx timeout
[  205.129193] Bluetooth: hci4: command tx timeout
[  205.193544] Bluetooth: hci3: command tx timeout
[  205.768432] Bluetooth: hci7: command tx timeout
[  206.728423] Bluetooth: hci0: command tx timeout
[  206.922157] Bluetooth: hci2: command tx timeout
[  206.984484] Bluetooth: hci1: command tx timeout
[  207.111599] Bluetooth: hci6: command tx timeout
[  207.175716] Bluetooth: hci5: command tx timeout
[  207.176221] Bluetooth: hci4: command tx timeout
[  207.240445] Bluetooth: hci3: command tx timeout
[  207.815542] Bluetooth: hci7: command tx timeout
[  261.021904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.029125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.032018] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  261.039999] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  261.048191] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.210220] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  261.214943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  261.222940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  261.231445] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  261.241220] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  261.418452] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  261.424997] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  261.425915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  261.432316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  261.436963] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  261.438571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  261.457292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  261.463001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  261.477214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  261.486680] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  261.501839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  261.515892] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  261.533175] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  261.548350] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  261.554235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  261.555869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  261.581043] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  261.589985] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  261.593763] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  261.597686] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  261.600656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  261.606283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  261.610627] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  261.638958] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  261.647162] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  261.676322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  261.679792] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  261.736777] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  261.790992] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  261.798637] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  263.111669] Bluetooth: hci0: command tx timeout
[  263.304690] Bluetooth: hci1: command tx timeout
[  263.568024] Bluetooth: hci2: command tx timeout
[  263.623503] Bluetooth: hci3: command tx timeout
[  263.688511] Bluetooth: hci7: command tx timeout
[  263.815469] Bluetooth: hci6: command tx timeout
[  263.943499] Bluetooth: hci5: command tx timeout
[  264.007600] Bluetooth: hci4: command tx timeout
[  265.161397] Bluetooth: hci0: command tx timeout
[  265.353420] Bluetooth: hci1: command tx timeout
[  265.607778] Bluetooth: hci2: command tx timeout
[  265.672668] Bluetooth: hci3: command tx timeout
[  265.736512] Bluetooth: hci7: command tx timeout
[  265.864452] Bluetooth: hci6: command tx timeout
[  265.992521] Bluetooth: hci5: command tx timeout
[  266.056473] Bluetooth: hci4: command tx timeout
[  267.208434] Bluetooth: hci0: command tx timeout
[  267.400583] Bluetooth: hci1: command tx timeout
[  267.655482] Bluetooth: hci2: command tx timeout
[  267.721389] Bluetooth: hci3: command tx timeout
[  267.784482] Bluetooth: hci7: command tx timeout
[  267.912611] Bluetooth: hci6: command tx timeout
[  268.040739] Bluetooth: hci5: command tx timeout
[  268.104431] Bluetooth: hci4: command tx timeout
[  269.257411] Bluetooth: hci0: command tx timeout
[  269.448450] Bluetooth: hci1: command tx timeout
[  269.703637] Bluetooth: hci2: command tx timeout
[  269.767649] Bluetooth: hci3: command tx timeout
[  269.832648] Bluetooth: hci7: command tx timeout
[  269.959418] Bluetooth: hci6: command tx timeout
[  270.087446] Bluetooth: hci5: command tx timeout
[  270.152777] Bluetooth: hci4: command tx timeout
[  323.167652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  323.171092] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  323.177639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  323.191001] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  323.201441] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  323.418434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  323.427058] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  323.432641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  323.446904] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  323.458906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  323.515125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  323.521988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  323.526452] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  323.551872] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  323.570128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  323.724177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  323.752296] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  323.753663] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  323.771710] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  323.778110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  323.780263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  323.795213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  323.804922] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  323.810895] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  323.836935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  323.922267] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  323.930905] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  323.950259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  323.972147] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  323.982597] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  324.050456] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  324.086987] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  324.118006] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  324.127630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  324.176622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  324.304153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  324.437899] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  324.454891] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  324.536547] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  324.581846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  325.257648] Bluetooth: hci0: command tx timeout
[  325.511507] Bluetooth: hci1: command tx timeout
[  325.639733] Bluetooth: hci2: command tx timeout
[  325.895635] Bluetooth: hci4: command tx timeout
[  326.087465] Bluetooth: hci5: command tx timeout
[  326.215776] Bluetooth: hci7: command tx timeout
[  326.345141] Bluetooth: hci3: command tx timeout
[  326.727630] Bluetooth: hci6: command tx timeout
[  327.303581] Bluetooth: hci0: command tx timeout
[  327.560683] Bluetooth: hci1: command tx timeout
[  327.687443] Bluetooth: hci2: command tx timeout
[  327.943591] Bluetooth: hci4: command tx timeout
[  328.137396] Bluetooth: hci5: command tx timeout
[  328.263510] Bluetooth: hci7: command tx timeout
[  328.391659] Bluetooth: hci3: command tx timeout
[  328.775462] Bluetooth: hci6: command tx timeout
[  329.351434] Bluetooth: hci0: command tx timeout
[  329.607833] Bluetooth: hci1: command tx timeout
[  329.735470] Bluetooth: hci2: command tx timeout
[  329.993717] Bluetooth: hci4: command tx timeout
[  330.183831] Bluetooth: hci5: command tx timeout
[  330.311430] Bluetooth: hci7: command tx timeout
[  330.440463] Bluetooth: hci3: command tx timeout
[  330.823469] Bluetooth: hci6: command tx timeout
[  331.400475] Bluetooth: hci0: command tx timeout
[  331.655638] Bluetooth: hci1: command tx timeout
[  331.783649] Bluetooth: hci2: command tx timeout
[  332.039455] Bluetooth: hci4: command tx timeout
[  332.231459] Bluetooth: hci5: command tx timeout
[  332.359599] Bluetooth: hci7: command tx timeout
[  332.487450] Bluetooth: hci3: command tx timeout
[  332.871614] Bluetooth: hci6: command tx timeout
[  386.021603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  386.026248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  386.028948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  386.041960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  386.050607] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  386.094119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  386.098041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  386.100637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  386.107030] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  386.110537] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  386.149297] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  386.156836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  386.160957] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  386.182755] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  386.189221] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  386.378090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  386.398136] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  386.411554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  386.427284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  386.450792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  386.516525] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  386.534339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  386.568611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  386.573824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  386.578719] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  386.591108] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  386.601997] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  386.617036] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  386.636924] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  386.688856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  386.707116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  386.710758] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  386.717330] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  386.721508] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  386.729164] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  386.733933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  386.742859] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  386.754217] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  386.802741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  386.831654] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  388.104441] Bluetooth: hci0: command tx timeout
[  388.169437] Bluetooth: hci1: command tx timeout
[  388.296418] Bluetooth: hci2: command tx timeout
[  388.679687] Bluetooth: hci3: command tx timeout
[  388.743560] Bluetooth: hci5: command tx timeout
[  388.871501] Bluetooth: hci6: command tx timeout
[  388.872302] Bluetooth: hci4: command tx timeout
[  388.935474] Bluetooth: hci7: command tx timeout
[  390.152530] Bluetooth: hci0: command tx timeout
[  390.215507] Bluetooth: hci1: command tx timeout
[  390.343575] Bluetooth: hci2: command tx timeout
[  390.727592] Bluetooth: hci3: command tx timeout
[  390.792506] Bluetooth: hci5: command tx timeout
[  390.920405] Bluetooth: hci6: command tx timeout
[  390.920849] Bluetooth: hci4: command tx timeout
[  390.983452] Bluetooth: hci7: command tx timeout
[  392.199457] Bluetooth: hci0: command tx timeout
[  392.263484] Bluetooth: hci1: command tx timeout
[  392.391686] Bluetooth: hci2: command tx timeout
[  392.775621] Bluetooth: hci3: command tx timeout
[  392.840660] Bluetooth: hci5: command tx timeout
[  392.967512] Bluetooth: hci4: command tx timeout
[  392.968003] Bluetooth: hci6: command tx timeout
[  393.032285] Bluetooth: hci7: command tx timeout
[  394.247486] Bluetooth: hci0: command tx timeout
[  394.312661] Bluetooth: hci1: command tx timeout
[  394.439480] Bluetooth: hci2: command tx timeout
[  394.823630] Bluetooth: hci3: command tx timeout
[  394.889407] Bluetooth: hci5: command tx timeout
[  395.015715] Bluetooth: hci6: command tx timeout
[  395.016206] Bluetooth: hci4: command tx timeout
[  395.079690] Bluetooth: hci7: command tx timeout

VM DIAGNOSIS:
21:23:10  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff84b242cb RDX=ffff888016885280
RSI=ffffffff84b24129 RDI=0000000000000001 RBP=0000000000000002 RSP=ffff8880315af9f0
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000006 R11=0000000000000001
R12=ffff88800bfbc2c2 R13=dffffc0000000000 R14=ffff8880315afa78 R15=000000000000000b
RIP=ffffffff81738c0b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007ff53eba3540 00000000 00000000
GS =0000 ffff8880e561b000 00000000 00000000
LDT=0000 fffffe4500000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff53f06a008 CR3=00000000290fe000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffff00ffffffffffffffffffffff00ff
XMM02=4c4700362e322e325f4342494c470035 XMM03=00000000000000000000000000470035
XMM04=4342494c4700362e322e325f4342494c XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000000 RBX=0000000003ffffff RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000cc0 RDI=ffff8880094053c0 RBP=ffff888036bcfc78 RSP=ffff888036bcfc20
R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001
R12=ffff8880094053c0 R13=0000000000000cc0 R14=ffff8880159c9ec0 R15=ffffffff818cfb90
RIP=ffffffff81a7c255 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 00000000 00000000
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e571b000 00000000 00000000
LDT=0000 fffffe0e00000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5c97473088 CR3=0000000028c76000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=322e6f732e6c6462696c2f756e672d78
XMM02=00322e6f732e6c6462696c2f756e672d XMM03=78756e696c2d34365f3638782f62696c
XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000