Warning: Permanently added '[localhost]:18897' (ECDSA) to the list of known hosts. 2025/06/01 04:38:50 fuzzer started 2025/06/01 04:38:51 dialing manager at localhost:34361 syzkaller login: [ 100.709432] cgroup: Unknown subsys name 'net' [ 100.844642] cgroup: Unknown subsys name 'cpuset' [ 100.906147] cgroup: Unknown subsys name 'rlimit' 2025/06/01 04:39:06 syscalls: 202 2025/06/01 04:39:06 code coverage: enabled 2025/06/01 04:39:06 comparison tracing: enabled 2025/06/01 04:39:06 extra coverage: enabled 2025/06/01 04:39:06 setuid sandbox: enabled 2025/06/01 04:39:06 namespace sandbox: enabled 2025/06/01 04:39:06 Android sandbox: enabled 2025/06/01 04:39:06 fault injection: enabled 2025/06/01 04:39:06 leak checking: enabled 2025/06/01 04:39:06 net packet injection: enabled 2025/06/01 04:39:06 net device setup: enabled 2025/06/01 04:39:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/06/01 04:39:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/06/01 04:39:06 USB emulation: enabled 2025/06/01 04:39:06 hci packet injection: enabled 2025/06/01 04:39:06 wifi device emulation: enabled 2025/06/01 04:39:06 802.15.4 emulation: enabled 2025/06/01 04:39:06 fetching corpus: 0, signal 0/0 (executing program) 2025/06/01 04:39:07 starting 8 fuzzer processes 04:39:07 executing program 0: socketpair(0x1d, 0x4, 0x74b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x124, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x1, 0x3}, {0x6, 0x2}, {0x10, 0x4}, {0x5, 0x3}, {0x7f, 0x7}, {0xa, 0x7}, {0xf7, 0x5}, {0x7, 0x3}, {0x7f, 0x6}, {0x4, 0x5}, {0x0, 0x3}, {0x2, 0x2}], "886272da5b91de4c"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0xff, 0x8}, {0x17, 0x2}, {0x18, 0x4}, {0xf1, 0x3}, {0x3f, 0x7}, {0x5, 0x3}, {0xab, 0x2}], "95fca1231ef22475"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x5, 0x4}, {0x80}, {0x20, 0x2}, {0x8, 0x2}, {0x9}, {0xff, 0x5}, {0x4, 0x6}], "5a7bb83969fb8f11"}}, @NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "cb188224115f6b40"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x0, 0x5}, {0x40}, {0x7e, 0x2}, {0x5, 0x6}, {0xc2, 0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x81, 0x3}, {0x6, 0x1}], "b9130c15f640cf13"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x9, 0x1}, {0x3, 0x2}, {0x8, 0x5}, {0x1, 0x3}, {0x20, 0x5}, {0x7}, {}, {0xe, 0x5}, {0x9}, {0xa7, 0x2}, {0x6, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x89, 0x7}, {0x2, 0x4}, {0x1, 0xff}, {0x5c}], "4f0cc5fe084f671a"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x9, 0x6}, {0x4, 0x7}, {0x40, 0x1}, {0x3b, 0x6}, {0x3f, 0x1}, {0x20, 0x4}, {0x7f, 0x4}, {0x7, 0x7}, {}, {0x1, 0x1}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x2}, {0x7f, 0x80}, {0x0, 0x6}, {0x9e, 0x4}, {0xb7, 0x1}, {0x4, 0x5}, {0x8, 0x2}, {0x10, 0x4}], "a1fcb0f7a0bea5db"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x6d, 0x6}, {0x3f, 0x2}, {}, {0x8, 0x5}, {0x4, 0x4}, {0xed, 0x2}, {0x8, 0x7}, {0x5, 0x7}], "1e26e9d589a41425"}}]}, 0x124}, 0x1, 0x0, 0x0, 0x1}, 0x40000c1) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x7c, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff53, 0x3d}}}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x9, 0x3}, {0xff, 0x2}, {0x7, 0x2}, {0x4, 0x1}, {0xaf}, {0x20, 0x7}, {0x4, 0x4}, {0x1, 0x4}, {0x90, 0x1}, {0x0, 0x2}, {0x5, 0x2}], "a81e65e98549adc5"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4, 0x6}, {0xcc, 0x2}, {0x4}, {0x1f, 0x3}, {0x0, 0x3}, {0x9b, 0x2}, {0xbb, 0x6}, {0x40, 0x2}], "fc8efa600b480fde"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x0, 0x3}, {0xe1}, {0x4, 0x6}, {0x1, 0x7}, {0x7b, 0x6}, {0x8, 0x5}, {0x2, 0x4}], "8318a437ea44a39e"}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24004042}, 0x20008800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x20008801) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:shell_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44040) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa904}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0x8008091) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r6, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x40, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x40}}, 0x24040001) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r7, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004050}, 0x4001040) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000b40)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000cc0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x74, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000010}, 0x2044005) 04:39:07 executing program 1: sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x28}}, 0x819) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x3c}}, 0x4804) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_LEVEL={0x54, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xff}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x40}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0xa0}, 0x1, 0x0, 0x0, 0x805}, 0x20000000) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x60, r2, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, r5, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x0, 0x310, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80000000, 0x7b}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x880) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r7, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x28, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x20000081) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), r9) 04:39:07 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000000)={{{@in=@local, @in6=@loopback}}, {{@in6=@private2}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000100)=0xe8) clone3(&(0x7f0000000340)={0x80300000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x1a}, &(0x7f0000000200)=""/58, 0x3a, &(0x7f0000000240)=""/156, &(0x7f0000000300)=[0x0], 0x1}, 0x58) move_pages(r1, 0x5, &(0x7f00000003c0)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000400)=[0xa000], &(0x7f0000000440)=[0x0, 0x0], 0x2) shmget(0x3, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/locks\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2040}, 0x4) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c000}, 0x4004001) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}}, 0x400c010) r3 = socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x3f43, &(0x7f0000000800)={0x0, 0x2493, 0x1, 0x2, 0x1a3, 0x0, r2}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5ca6152af18df657}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x3c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfae}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a80)) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000ac0)='veno\x00', 0x5) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x28, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ba1465c18c65"}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000c80)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x40, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x40}}, 0x0) 04:39:07 executing program 3: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, r0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) socket$inet(0x2, 0x4, 0x3) r1 = socket(0xf, 0x3, 0x8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x9, 0x7, 0x4, 0x187, 0x4, 0xce4a, 0x60d1, 0x7}, &(0x7f00000000c0)={0x6, 0x2ae, 0x22, 0x9, 0x1, 0x2, 0x6, 0xfffffffffffffff7}, &(0x7f0000000100)={0x8, 0x4, 0x3ff, 0x0, 0x20, 0x16b8, 0x7, 0x2}, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1]}, 0x8}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000200)=""/136) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffff9c, 0xc0406619, &(0x7f0000000300)={@desc={0x1, 0x0, @desc3}}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000340)={'TPROXY\x00'}, &(0x7f0000000380)=0x1e) r2 = pkey_alloc(0x0, 0x4) pkey_mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, r2) getpgid(0xffffffffffffffff) clock_getres(0x6, &(0x7f00000003c0)) rt_sigtimedwait(&(0x7f0000000400)={[0x2e]}, 0x0, &(0x7f0000000440), 0x8) syz_io_uring_setup(0x4c99, &(0x7f0000000480)={0x0, 0x284f, 0x0, 0x3, 0x27e}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000500), &(0x7f0000000540)) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000580), 0xffffffffffffffff) [ 116.690872] audit: type=1400 audit(1748752747.745:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:39:07 executing program 4: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x810) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000500)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000dc0)={0xfffffffffffffffe, 0x0, &(0x7f0000000d80)={&(0x7f00000005c0)={0x7c0, r0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8d}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x44}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa335}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}]}}, {{0x8, 0x1, r7}, {0x1d0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9d7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x7c0}, 0x1, 0x0, 0x0, 0x80}, 0xd4) bind$inet(0xffffffffffffffff, &(0x7f0000000e00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) r9 = socket$inet(0x2, 0x80001, 0x20) getsockopt$inet_tcp_int(r9, 0x6, 0x4, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001140)={0x90, 0x0, &(0x7f0000001040)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000ec0)={@fda={0x66646185, 0x1, 0x1, 0x13}, @flat=@weak_handle={0x77682a85, 0x100b, 0x1}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000f40)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000f80)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x8, 0x1, 0x27}}, &(0x7f0000001000)={0x0, 0x18, 0x30}}, 0x40}], 0x2f, 0x0, &(0x7f0000001100)="6c39c03f66f1f0f23ec2c60cb6db77d8402c0c5a522d49dd85ae8c123b74a6d69732406858fdcf685671fe92a85de5"}) accept$packet(r1, 0x0, &(0x7f0000001180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001240)={'ip6tnl0\x00', &(0x7f00000011c0)={'ip6gre0\x00', r5, 0x2f, 0x1, 0x5, 0x6, 0x50, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x7800, 0x1, 0x8001}}) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000001280)={@in6={{0xa, 0x4e22, 0x8, @remote, 0x81}}, 0x0, 0x0, 0x33, 0x0, "5ff9402ea1dcbe8688527dfc901d85fcf65a30ed331c8dff4ca60dca9ab96bd9b6a4d6e3f92b92050e94ee2746cade4f78eddac6945702511d7998cefd94fa866ee1ac6981ffec544fb86a582a6f1337"}, 0xd8) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x20, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f698f2a97c"}]}, 0x20}, 0x1, 0x0, 0x0, 0x814}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x84) 04:39:07 executing program 5: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f8969d15098fba4}, 0x20000084) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x4040) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, r1, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40050}, 0x4044) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x6c, r5, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfffffffffffffffe}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, r3, 0x200, 0x3, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6_vti0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000804) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x51) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0xc5682db4b796c137}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x70, r5, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xcf486c14944d6f36}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080) 04:39:07 executing program 7: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x2}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1, 0x2}) accept$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000001c0)=0x8001) socketpair(0x2b, 0x0, 0x1, &(0x7f0000000200)) io_uring_setup(0x7ea7, &(0x7f0000000240)={0x0, 0xc372, 0x4, 0x0, 0x14d}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x101, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x8) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r3 = memfd_create(&(0x7f00000003c0)='[/-\\[-{#,\x00', 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/23, 0x17, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/53, 0x35, 0x1, 0x12}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000480)={0x0, 0x28, 0x50}}, 0x40}], 0xab, 0x0, &(0x7f0000000540)="ade05c6af564c477ac5684db469fd130114b7431d511db59d1c1584685f873cf94a308ccd0de122dea6c15d2c7db585a540e4040697397b87c8f41862bd5473c4d1bf3197d34144ce899e6cf964232c31f62591b390a2b70ee3152f2471daac0d3d3551cd81caaf055e462d7376e0f009a97cbad325a0030055971df082daad4e16c8ae504a1583c2ae2d5cc2f288f34126be3934ca6251f1fe0b9f661afabb085bbb97ba9f09c171a08c1"}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)={'some', 0x20, 0x4, 0x20, 0x1}, 0x2f) 04:39:07 executing program 6: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x490583}, 0xc, &(0x7f0000000d00)={&(0x7f0000000080)={0xc4c, r0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x1d}}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x81, 0xf, [@ht={0x2d, 0x1a, {0xc, 0x3, 0x5, 0x0, {0xcdec, 0x6, 0x0, 0x3f9, 0x0, 0x0, 0x1, 0x2}, 0x400, 0x10000, 0x6c}}, @dsss={0x3, 0x1, 0x2c}, @ssid={0x0, 0x20, @random="80e8fa4f8e8b25538f6c4147676a1a694e67648b5a9ca3fcaac1dfa14435d556"}, @ht={0x2d, 0x1a, {0x4000, 0x2, 0x1, 0x0, {0x4a, 0x0, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0xce, 0x4}}, @challenge={0x10, 0x1, 0xd}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21}}, @link_id={0x65, 0x12, {@random="e0ee1105d9f8", @device_b}}]}, @NL80211_ATTR_PROBE_RESP={0x216, 0x91, "153cca6cb811403c13f362c2b62e83d260a4eaf7c9cb4cc60a60731e955df675ee0e97b756d8b4c1410d16570bef3dc38195f1b5efcf76abb7a6f45df27c5b465667ab0ca8a8524d8830626f4aaf8342f3507345ce0fd007f9c658d8e0efd37bee032a31d1079f87492f1801b187093e949e73703e992ac11aa2ed13e7515940970b292edbbb9aaee710485d8f511d67e9eb1570efe7ed726c899d99861bb5a7bf24bd91930d58d522cf8b73e7f991c8569311888e0b60399847dbd1e76718381e1d7d145790fc04e37e242b7710a259eabacc97d7bf05a6c043a71a380ddb02bf3196afbe2ed0a965927b4c0547945101866ce0b6a7fe436add2e95aaae2656abfabbaf54b7a86164e7102ead17a717441c12b5b44085592871ed110f42e1330aa23bcf857cff645a8f8270a7f8affd693694f4d48d9fd1cdfb45ac6708ad06f786450c8a7b312d90bb179f425e20e2dbdfdfa0b244623c8054556f105d31504f073c245ccb9d2090d984a20cd73815e63e3d6671028acbd5778adf6bf46198cef9e3d9219b83527b58d3406030ae5667c8007a6715837886f2222f24eb709bdfed4dae870dacb5a52e25af196e1604364a491021ff4ea03c8ceaf5c24e5e1d23f2360e334feb027dce1c315772a792e7ca7f3f6fbde7144d6380cfe3fe803ce36d077717c758bb6cc2e2a75ea955da82c8d935d2282c86f150b470514bc2933e5c07baaad7f649cf58f0bd759b0cd1abd4"}, @NL80211_ATTR_PROBE_RESP={0x32f, 0x91, "c6dd835d2410652c2cc44f471061cc197222bfeec6c863f6558cf06c245321d55f19ac8b58b636f478def85eb31cdac82f4787547e768fe7e6974ae582dcdd0079eb7084b711361ea64c98b2f280752fe2160b9e943092f43aff05f0a992a78004f71a00024d27237df6933f25c3ccd8eccf95cfa8b8e32dc0afd2a897463bf870b5c5bcbb7604bd12d5a923ba630ca8e9626cdfa82e64eb52331cbd5714a57bfe06069fece90407617b1a18c08798d0558e9b7dcb8df2bb966375a75e1105a46ae10383b1b33f9e10f95bfa0a6cce2495c1102100656927f9ddf65f043ac5450a5b68c3135114fe3f596c422afd4f557dc49b69e213192750e596c60b118e90ab2ad7248dd32aee29e885ff9dc4f22bcbf25593007dfb20f8c49b0f4db6210fc18d5bccc9c988948d054b1e3cceb8b350ab1ff41faab7bc6058959f5cf786b8f6c5f2357ad42189a295eb028ee441c410a899882bce5652315c00d8374ca9e71df3264e80c73a342f098582ef0eec3702749e12af00b65db872ca20def691c71d99369e7cafb06972cc394ed9c5d6f6100ff823dd9e52e39db287ed85f6e360fe5872c911f87d6c277790e85b77a57f00a113ddd802d04245c7ed1da28c5d0f5a35fa90df635bec9e7084102bb08d5e77ab423431081b089e8b61717e82f3c146c5e5fb919c445774a765030bb9e0f36bba75d7d918875f48507b6c91ca3adc3f7386eac7ff360c5d5e19e5b10d8e5caddc824acc20baf56e685842e7b11256ac9bd553133c60682770db63670923e3f269eb0422a44b506ec2d7734bc2c00968c0fd6ab7b3e814c41b036d95a5c7dfa8b43b8d424c80f5b71136ac113c8a08a29306be9891fb821781a4103903661b0adde1ed17e3bd8fc12076aad611e34c51af00f7c8e6f42f3cb0d07e3db9bec00fa5edb5140b969701bdb2bc2bb7c550e28193af3513bcf93035647a6efb26c6770af607f9a3ecb76b2d68397a03f7a9771aa1152aff264e38d80712e16e644adff004a248c2911c9b71181c5667a9fd143d68feaa36c52ddd48ae1bd58a2bdc23b2a58d2af588978a9065bc18b135defa725962c1dd20e8db63683cf42a9a906bdaf05177babbcd70d30678f7b7b1f93eb16033fe0bbecbefc962"}, @NL80211_ATTR_BEACON_TAIL={0x102, 0xf, [@chsw_timing={0x68, 0x4, {0x0, 0x3}}, @supported_rates={0x1, 0x5, [{0x5e}, {0x50, 0x1}, {0x24, 0x1}, {0x24, 0x1}, {0x16, 0x1}]}, @channel_switch={0x25, 0x3, {0x1, 0xb6, 0x81}}, @channel_switch={0x25, 0x3, {0x1, 0xc, 0x80}}, @challenge={0x10, 0x1, 0x81}, @random={0x20, 0xbb, "a06c7bd6f97c09bf7e8b66ed55300e9cc617e344b99e5877ce33d71cc1f0b05848673afa1e162d5116e15cdec003f9e608723682e3158e8152f92c04e9d5c0f2e12d5eba0c0c61459cfd1a62e064353411b8eb2935967cb685a761b00f1a79c034bd30357f0d4f3264912065b0c8810ac85239f5c5656acfb5d3a65a3df4e33229841529a580e5923b19145d56503be0e5a2771c6dfcb94d72fdd4d801ac21db9a7e20bae7b4320518de96ebda254796cdac7658b153eef2e0b4dd"}, @peer_mgmt={0x75, 0x6, {0x1, 0x3, @val=0x20, @void, @void}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x6, 0x20, 0x1000}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x7f, 0x4, @broadcast, 0x7, 0x7ff, 0xa399}}]}, @NL80211_ATTR_BEACON_HEAD={0x3ee, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x1000}, @device_a, @device_a, @random="11998e908237", {0xb, 0x6}}, @ver_80211n={0x0, 0x80, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x5, @default, 0x8300, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x5, [{0x6c}, {0x36}, {0x6}, {0x9}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0xb1}, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x8, 0x1}}, @void, @val={0x3c, 0x4, {0x0, 0x97, 0xb0, 0x4}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xc0, 0x9}}, @val={0x76, 0x6, {0x6, 0x0, 0x1f, 0x200}}, [{0xdd, 0xd3, "debdf8fb127db947033a55d92222bd1a82dd3258257d77bd45603a22bf474b7ba6e2a5bb137c38018ca36ca9318f20bd8ed09c5afe2685be7d72395c8e69a05d379ee3d4b0af7f2e734b5aacbe4bd8178c49f268f88d8f36c8531a8de2642756db3a7dc9563ab4324bc8108aa5aba579e2279df8bd05dc287c737b86049d773ad04d2a8dfa5c03479d715a3854f6be42efd1b5bc61f6ac3f7b41fbe2c5063ea2ae5580d22577996e8bfb19008c7ff8ef170e9c334505ff3294c3ac9e99de67c009a83c9f9be628b81e11b70c09e55ca301e7b5"}, {0xdd, 0x21, "fe3865e7740ced98c6430953bc8e30fa73405fcd4a1333dad17747f6e6f4e0bae5"}, {0xdd, 0xb7, "9543ffbae5c52504614cad5b52a1d7a811390b40d225abc490359e2ce77ad621ef5f066f6c21b3545a5ecd43e877f8e8b0b3303cb645bdee82d2ef009dd38cfcfef96cc9cb58581439c70e8ad0a4cb73aa456d27f730df6e3fab08f5d850fa17d8433deb0e74a978f29ae639c92ff25fac73842dfc6c357e6ab548ba6ee1d0c12282ea72891dcdd5ebc95f6555fd4cf7a506665eda301432c7572a1341cd4f5103a12896c315532a6c883e8a5eb9be0c0afc28b7ac440e"}, {0xdd, 0xeb, "51c047abf86f3f1496ebe95e58529b6b906032414988a7e4650b2daa224569a4dc7d19c95e84be538e56f1fb30383282d34983adf72e991df4400c3bdd380117baa1cd21e66286f20a77d1047afd1b300c5e1ca3047d9b88d0997df7351829f0c3128c717730d4bffd9b0126bf6acd99e44bc72905c7acdf1311f8c858be2a40df3e587a7e6f1eb220856db530c6903726cb536919ce0cd1d0c56f46436b296826b9861de37ae984a50893d6edd8695128c13ddb8b4ff0fa65fb059051dcd018185ef70f8f2c816bbad0a8a24fdb3a7d3280bbfa843c6b53110a3017ee6930e9efe523d2708653336f06bb"}, {0xdd, 0xcc, "077706a942b519a9fec2ed00ae505e46926415cdc1270cd899ed60500d877e8c8718cb06f2927408f9e4c03c64cb85f54a58706d89aeb4c50eac81dd45fdf84cd36301e0c4b73bb8bd124a4d99e1cde5f493797f88feeff3105e2333e3ba915e0a278e530f581cff6313710266e913163160350c90b066b11c3467385a86a072b7c4d6ebcbab832e3ddea5593f030d75365787e2832c1179d49a78d954021b144d5b3b537eb747c983528df1fdb5ab17ba71f10c3c1000af120b8cb58b954ba5b8d6c3785b5dc6f4b3f5c578"}, {0xdd, 0x1a, "7d0e087e103c14fd7aaef769d21cb9e5ac3a9e5c00d5f0f740e0"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x1c, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x3, 0x4, 0x34, 0x2}}, @mic={0x8c, 0x10, {0x7b7, "a30f6ddffa3c", @short="adfb7458c850e079"}}]}], @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb7}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x200}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac09}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "6d331ed738460afaef3915cf77f17852ef5ce7d5ff08c75c14f9fe5b61bf3bae82c1c1674dda390e95824094e27ccc09169441f0b4292f4282cb3596556f3b40f709a10a907b5aaa96c8da8415323b1d2b07fd09746419cdbb8ec95ef677b2c747c7cf0eaf418e9c37e2a509adc0ad74957be94fead28e9bb4b091c79eeda96817f253453a41dba959c208629a747710ed1adcb47a545f16f300381625472c2108d3f5d1386d160354069d8c24a7f5559057f8fadd6d682f9f71c9ee3e2474e95fccd1aabb858bbdec5336b38cc6349969f9d795ee8cdf082507eec3000c1e406574508d346cffbfea9dee8862489bd25aae8fe198dc5bfa8d3b7bc66edd"}]]}, 0xc4c}, 0x1, 0x0, 0x0, 0x80}, 0x95) socketpair(0x1, 0x2, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000f40)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e00)={0xf0, r0, 0xf2f32ee2a849e14c, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfb, 0x23}}}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x8c, 0x6}, {0x9d, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0xf8}, {0x6f, 0x5}, {0x82}, {0x3f, 0x7}, {0x1f, 0x7}, {0xe4}, {0x4, 0x7}, {0x3, 0x5}], "62eeebf647a389a1"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8, 0x3}, {0x98, 0x7}, {0x1, 0x3}, {0x1, 0x1}, {0x9, 0x1}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x5}, {}, {0x0, 0x5}, {0x8, 0x1}, {0xc6, 0x5}, {0x9, 0x6}, {0x3}, {0x7f, 0x1}, {0x22, 0x7}, {0x1, 0x6}, {0x0, 0x2}, {0x5}, {}], "9f5fb57d11ec2f43"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x81, 0x1}, {0x7}, {0x3, 0x6}, {0xff}, {0x9b, 0x1}, {0x8, 0x5}, {0x8, 0x7}, {0x9, 0x3}, {0xe3, 0x4}, {0x8, 0x4}, {0xff, 0x4}, {0x3f, 0x7}, {0x7, 0x4}, {0x3f, 0x4}], "ff0c74dc945820e6"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0xfe, 0x5}, {0x80, 0x1}, {0x20, 0x1}, {0x6, 0x1}, {0x8, 0x6}, {0x4}, {0x0, 0x6}, {0xff, 0x4}, {0x0, 0x5}, {0x8, 0x2}, {0x1, 0x6}, {0x0, 0x6}, {0x40, 0x4}, {0x7f, 0x4}], "4aebedd037284274"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x5, 0x6}, {0x3, 0x5}, {0x4, 0x7}, {0x2, 0x6}, {0x7, 0x3}, {0x9, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x80, 0x5}], "49b7272230d91067"}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x2000000}, 0x40800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000fc0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001000)={0x3f4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff16f0}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100000}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4c001}, 0x4008894) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000001500)={'syztnl2\x00', &(0x7f0000001480)={'syztnl0\x00', r3, 0x4, 0x6, 0x5, 0x8, 0xa, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x5, 0x4f5b}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000015c0)={'ip6gre0\x00', &(0x7f0000001540)={'syztnl0\x00', r5, 0x4, 0x97, 0x20, 0x80000001, 0x50, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x80, 0x7, 0x6}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001600)={@in6={{0xa, 0x4e22, 0x6, @remote, 0xff}}, 0x0, 0x0, 0x41, 0x0, "22c19365a3695d01e0f3e6e7643e1372498d974299379724915901ea51edae2b7ab2a62f55825aaedde263e5de6effbb207949d2ebcb616ddd8be5e94edd783c6f1f444ccc816ef8255336483b8e1fce"}, 0xd8) socketpair(0x1e, 0x4, 0x3, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r9, 0x89f7, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'sit0\x00', r6, 0x29, 0x20, 0x8, 0x0, 0x18, @dev={0xfe, 0x80, '\x00', 0xd}, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf, 0x10, 0x5, 0x6}}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001840), r9) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000001900)={'syztnl1\x00', &(0x7f0000001880)={'ip6tnl0\x00', r5, 0x4, 0x7, 0x5, 0xe508, 0x5c, @rand_addr=' \x01\x00', @empty, 0x40, 0x20, 0x3, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) accept$packet(r2, &(0x7f0000001980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000019c0)=0x14) accept$packet(r1, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000002940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002900)={&(0x7f0000001d80)={0xb4c, r11, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1e1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1cc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff, 0x6, 0x7, 0x3}, {0x8, 0x8, 0x3, 0x5}, {0x8001, 0x2, 0xdb, 0x1}, {0x81c3, 0x4, 0x8, 0x4}, {0x6b, 0x1, 0x40, 0xbc9e7bd0}, {0x200, 0x0, 0x8f, 0xfffffffa}]}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x4}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r10}, {0x11c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r10}, {0x180, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0xf800, 0x5, 0x6, 0x8}, {0x4, 0x6, 0x91, 0x2}, {0x3ff, 0x80, 0x5, 0x8}, {0x1, 0x7, 0x1, 0x7}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffe1}}}]}}, {{0x8, 0x1, r16}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbe}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r10}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xb4c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) [ 118.188012] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.192471] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.196259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.204100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.208445] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.312648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.319261] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.324118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.333392] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.342337] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 118.363025] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.372989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.388498] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.401437] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.403500] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.409072] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.422195] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.427312] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.429040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.435323] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.446795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 118.458535] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 118.481467] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 118.521104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 118.536114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 118.551111] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 118.554112] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 118.563242] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 118.570737] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 118.589173] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 118.593478] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 118.605469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 118.609518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 118.614382] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 118.625158] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 118.628530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 118.638036] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 118.644448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 118.661705] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 118.679780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 120.265393] Bluetooth: hci0: command tx timeout [ 120.392662] Bluetooth: hci1: command tx timeout [ 120.520871] Bluetooth: hci2: command tx timeout [ 120.521863] Bluetooth: hci3: command tx timeout [ 120.648939] Bluetooth: hci6: command tx timeout [ 120.649799] Bluetooth: hci4: command tx timeout [ 120.777436] Bluetooth: hci7: command tx timeout [ 120.778543] Bluetooth: hci5: command tx timeout [ 122.314589] Bluetooth: hci0: command tx timeout [ 122.440691] Bluetooth: hci1: command tx timeout [ 122.570630] Bluetooth: hci3: command tx timeout [ 122.571135] Bluetooth: hci2: command tx timeout [ 122.696689] Bluetooth: hci4: command tx timeout [ 122.697202] Bluetooth: hci6: command tx timeout [ 122.824711] Bluetooth: hci5: command tx timeout [ 122.825198] Bluetooth: hci7: command tx timeout [ 124.360648] Bluetooth: hci0: command tx timeout [ 124.489584] Bluetooth: hci1: command tx timeout [ 124.617048] Bluetooth: hci2: command tx timeout [ 124.618161] Bluetooth: hci3: command tx timeout [ 124.745052] Bluetooth: hci6: command tx timeout [ 124.746261] Bluetooth: hci4: command tx timeout [ 124.873599] Bluetooth: hci7: command tx timeout [ 124.874091] Bluetooth: hci5: command tx timeout [ 126.408790] Bluetooth: hci0: command tx timeout [ 126.537033] Bluetooth: hci1: command tx timeout [ 126.665792] Bluetooth: hci3: command tx timeout [ 126.666286] Bluetooth: hci2: command tx timeout [ 126.792677] Bluetooth: hci4: command tx timeout [ 126.793167] Bluetooth: hci6: command tx timeout [ 126.920850] Bluetooth: hci7: command tx timeout [ 126.921327] Bluetooth: hci5: command tx timeout [ 180.503526] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.509044] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.517290] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.526728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.530163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.574747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.576393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.577463] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.580029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 180.585788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 180.592877] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 180.597033] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 180.598247] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 180.604885] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 180.608073] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 180.609949] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.612702] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.614263] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 180.615187] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 180.631990] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 180.637318] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.642981] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.658439] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.660062] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.666127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.679134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.689916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.696201] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.701086] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 180.705539] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.711016] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 180.727721] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 180.730977] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 180.749009] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 180.757064] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 180.767110] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 180.770151] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 180.776273] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 180.805486] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 180.817269] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 182.600912] Bluetooth: hci0: command tx timeout [ 182.664778] Bluetooth: hci1: command tx timeout [ 182.664947] Bluetooth: hci2: command tx timeout [ 182.728659] Bluetooth: hci3: command tx timeout [ 182.792858] Bluetooth: hci4: command tx timeout [ 182.857638] Bluetooth: hci6: command tx timeout [ 182.921665] Bluetooth: hci5: command tx timeout [ 183.048696] Bluetooth: hci7: command tx timeout [ 184.649727] Bluetooth: hci0: command tx timeout [ 184.713709] Bluetooth: hci1: command tx timeout [ 184.713747] Bluetooth: hci2: command tx timeout [ 184.779611] Bluetooth: hci3: command tx timeout [ 184.841809] Bluetooth: hci4: command tx timeout [ 184.905854] Bluetooth: hci6: command tx timeout [ 184.969586] Bluetooth: hci5: command tx timeout [ 185.097650] Bluetooth: hci7: command tx timeout [ 186.697642] Bluetooth: hci0: command tx timeout [ 186.760795] Bluetooth: hci1: command tx timeout [ 186.760824] Bluetooth: hci2: command tx timeout [ 186.824782] Bluetooth: hci3: command tx timeout [ 186.888688] Bluetooth: hci4: command tx timeout [ 186.952627] Bluetooth: hci6: command tx timeout [ 187.016953] Bluetooth: hci5: command tx timeout [ 187.145638] Bluetooth: hci7: command tx timeout [ 188.745574] Bluetooth: hci0: command tx timeout [ 188.808867] Bluetooth: hci2: command tx timeout [ 188.809360] Bluetooth: hci1: command tx timeout [ 188.874625] Bluetooth: hci3: command tx timeout [ 188.937107] Bluetooth: hci4: command tx timeout [ 189.000913] Bluetooth: hci6: command tx timeout [ 189.064884] Bluetooth: hci5: command tx timeout [ 189.193977] Bluetooth: hci7: command tx timeout [ 242.777675] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.779711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.787837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.791460] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 242.799778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 242.801953] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 242.802687] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.809096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.810312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 242.811424] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 243.027241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 243.055765] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 243.069029] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 243.074603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.078978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 243.082150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.088816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.089362] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 243.092123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 243.095453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 243.101957] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.105099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 243.115183] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 243.120071] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.124478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 243.133760] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 243.151042] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 243.155207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 243.156998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 243.176851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 243.179255] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 243.194347] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 243.211348] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 243.221867] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 243.233490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 243.237130] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 243.250706] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 243.259689] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 243.307047] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 243.339769] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 244.872854] Bluetooth: hci0: command tx timeout [ 244.872994] Bluetooth: hci1: command tx timeout [ 245.192972] Bluetooth: hci4: command tx timeout [ 245.193861] Bluetooth: hci2: command tx timeout [ 245.320744] Bluetooth: hci6: command tx timeout [ 245.321667] Bluetooth: hci3: command tx timeout [ 245.322234] Bluetooth: hci5: command tx timeout [ 245.448691] Bluetooth: hci7: command tx timeout [ 246.920673] Bluetooth: hci1: command tx timeout [ 246.923612] Bluetooth: hci0: command tx timeout [ 247.240949] Bluetooth: hci2: command tx timeout [ 247.241450] Bluetooth: hci4: command tx timeout [ 247.369683] Bluetooth: hci5: command tx timeout [ 247.370176] Bluetooth: hci3: command tx timeout [ 247.370675] Bluetooth: hci6: command tx timeout [ 247.497844] Bluetooth: hci7: command tx timeout [ 248.969977] Bluetooth: hci0: command tx timeout [ 248.970459] Bluetooth: hci1: command tx timeout [ 249.289694] Bluetooth: hci4: command tx timeout [ 249.290193] Bluetooth: hci2: command tx timeout [ 249.419594] Bluetooth: hci6: command tx timeout [ 249.420092] Bluetooth: hci3: command tx timeout [ 249.420511] Bluetooth: hci5: command tx timeout [ 249.545752] Bluetooth: hci7: command tx timeout [ 251.016843] Bluetooth: hci1: command tx timeout [ 251.018869] Bluetooth: hci0: command tx timeout [ 251.337112] Bluetooth: hci2: command tx timeout [ 251.338121] Bluetooth: hci4: command tx timeout [ 251.464708] Bluetooth: hci5: command tx timeout [ 251.464734] Bluetooth: hci3: command tx timeout [ 251.464794] Bluetooth: hci6: command tx timeout [ 251.592759] Bluetooth: hci7: command tx timeout [ 305.054077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.059204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.067493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.075469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.079277] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 305.083256] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.087159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 305.104090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 305.135224] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 305.144287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 305.204402] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.208957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.228084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.236190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.246066] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.251218] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.255013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.271052] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.311639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.322353] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.334227] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 305.338856] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 305.392079] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 305.400131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 305.420390] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.420395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.429172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.477635] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.479735] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.508890] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.525037] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.541338] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.543122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.550342] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.600172] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.607906] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.612014] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.617223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.620422] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.665815] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 307.144758] Bluetooth: hci0: command tx timeout [ 307.208694] Bluetooth: hci1: command tx timeout [ 307.339132] Bluetooth: hci2: command tx timeout [ 307.402262] Bluetooth: hci3: command tx timeout [ 307.593066] Bluetooth: hci5: command tx timeout [ 307.593201] Bluetooth: hci4: command tx timeout [ 307.656660] Bluetooth: hci6: command tx timeout [ 307.784733] Bluetooth: hci7: command tx timeout [ 309.192739] Bluetooth: hci0: command tx timeout [ 309.256703] Bluetooth: hci1: command tx timeout [ 309.384760] Bluetooth: hci2: command tx timeout [ 309.449298] Bluetooth: hci3: command tx timeout [ 309.641017] Bluetooth: hci4: command tx timeout [ 309.641381] Bluetooth: hci5: command tx timeout [ 309.704682] Bluetooth: hci6: command tx timeout [ 309.832627] Bluetooth: hci7: command tx timeout [ 311.242117] Bluetooth: hci0: command tx timeout [ 311.305613] Bluetooth: hci1: command tx timeout [ 311.432740] Bluetooth: hci2: command tx timeout [ 311.496728] Bluetooth: hci3: command tx timeout [ 311.688785] Bluetooth: hci4: command tx timeout [ 311.688899] Bluetooth: hci5: command tx timeout [ 311.752773] Bluetooth: hci6: command tx timeout [ 311.880742] Bluetooth: hci7: command tx timeout [ 313.290987] Bluetooth: hci0: command tx timeout [ 313.352739] Bluetooth: hci1: command tx timeout [ 313.480662] Bluetooth: hci2: command tx timeout [ 313.544734] Bluetooth: hci3: command tx timeout [ 313.736826] Bluetooth: hci4: command tx timeout [ 313.737339] Bluetooth: hci5: command tx timeout [ 313.802031] Bluetooth: hci6: command tx timeout [ 313.928978] Bluetooth: hci7: command tx timeout [ 367.458037] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.462786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.466120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.474134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.478427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.637818] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 367.645768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 367.647332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 367.654847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 367.660039] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 367.776989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 367.783151] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 367.788850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 367.797067] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 367.809729] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 367.848299] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.851728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.856712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.862854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.869826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.906076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 367.921143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 367.942303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 367.961898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 367.968330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.985315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.006276] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 368.008455] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 368.011595] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 368.015523] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.020883] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.036268] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.036307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.039367] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 368.042281] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.044143] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 368.060420] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.065842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.067178] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.078163] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 369.544638] Bluetooth: hci0: command tx timeout [ 369.736649] Bluetooth: hci1: command tx timeout [ 369.864640] Bluetooth: hci2: command tx timeout [ 369.993673] Bluetooth: hci3: command tx timeout [ 370.057624] Bluetooth: hci4: command tx timeout [ 370.120694] Bluetooth: hci5: command tx timeout [ 370.185294] Bluetooth: hci6: command tx timeout [ 370.248862] Bluetooth: hci7: command tx timeout [ 371.593665] Bluetooth: hci0: command tx timeout [ 371.785251] Bluetooth: hci1: command tx timeout [ 371.912940] Bluetooth: hci2: command tx timeout [ 372.040841] Bluetooth: hci3: command tx timeout [ 372.105040] Bluetooth: hci4: command tx timeout [ 372.168770] Bluetooth: hci5: command tx timeout [ 372.233966] Bluetooth: hci6: command tx timeout [ 372.296747] Bluetooth: hci7: command tx timeout [ 373.640759] Bluetooth: hci0: command tx timeout [ 373.835005] Bluetooth: hci1: command tx timeout [ 373.960660] Bluetooth: hci2: command tx timeout [ 374.088733] Bluetooth: hci3: command tx timeout [ 374.153604] Bluetooth: hci4: command tx timeout [ 374.216748] Bluetooth: hci5: command tx timeout [ 374.281379] Bluetooth: hci6: command tx timeout [ 374.344658] Bluetooth: hci7: command tx timeout [ 375.688812] Bluetooth: hci0: command tx timeout [ 375.882838] Bluetooth: hci1: command tx timeout [ 376.008667] Bluetooth: hci2: command tx timeout [ 376.136887] Bluetooth: hci3: command tx timeout [ 376.200683] Bluetooth: hci4: command tx timeout [ 376.264790] Bluetooth: hci5: command tx timeout [ 376.328600] Bluetooth: hci6: command tx timeout [ 376.392754] Bluetooth: hci7: command tx timeout VM DIAGNOSIS: 04:44:09 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=ffffffff817410cf RDI=fffffbfff0b83a38 RBP=ffffffff85c1d1c0 RSP=ffff888030827568 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=ffffffff817410cf R14=0000000000000000 R15=ffff8880317cbee0 RIP=ffffffff81aeccaf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe6300000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f86f74ee790 CR3=0000000029c3d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000ffffff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000040 RCX=ffffffff81a156d7 RDX=ffff888013dc5280 RSI=ffffffff81a15705 RDI=0000000000000007 RBP=ffffea0001ae9b80 RSP=ffff8880305dfaa0 R8 =00007fdb99cb1000 R9 =fffff9400035d370 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001ae9b80 R13=ffffea0001ae9b80 R14=0000000000000000 R15=ffffea0001ae9b98 RIP=ffffffff81a15709 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fdb99b96540 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fdb99cb3710 CR3=00000000251e7000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000